
### status: Path 1 of [Dialog Information Services via Modem] 

### Status: Initializing TCP/IP using (UseTelnetProto 1 ServicelD pto-dialog) 
Trying 3106900061 ... Open 

DIALOG INFORMATION SERVICES 
PLEASE LOGON: 

******** HHHHHHHH SSSSSSSS? 
### Status: Signing onto Dialog 

ENTER PASSWORD: 

******** HHHHHHHH SSSSSSSS? ******** 
Welcome to DIALOG 
### Status: Connected 



Dialog level 01.07.09D 

Last logoff: 30jul01 13:19:13 

Logon file405 06aug01 13:27:54 

*** ANNOUNCEMENT *** 
* ★ * 

— Important Notice to Freelance Authors — 

See HELP FREELANCE for more information 

*** 

NEW FILE RELEASED 

***EIU Business Magazines (File 622) 
***IBISWorld Market Research (File 753) 
***Investext PDF Index (File 745) 

***Daily and Sunday Telegraph (London) Papers (File 756) 
***The Mirror Group Publications (United Kingdom) (File 757) 

UPDATING RESUMED 

***Delphes European Business (File 481) 
***Books In Print (File 470) 

★ *• + 

RELOADED 

***Kompass Middle East/Africa/Mediterranean (File 585) 
***Kompass Asia/Pacific (File 592) 
***Kompass Central/Eastern Europe (File 593) 
***Kompass Canada (File 594) 

New pricing structure for Pharmapro jects (Files 128/928) from 
April 1, 2001. Check Help Newsl28 or Help News928 for further 
information. 

»>Get immediate news with Dialog's First Release 

news service. First Release updates major newswire 
databases within 15 minutes of transmission over the 
wire. First Release provides full Dialog searchability 
and full-text features. To search First Release files in 
OneSearch simply BEGIN FIRST for coverage from Dialog's 
broad spectrum of news wires. 

»> Enter BEGIN HOMEBASE for Dialog Announcements «< 
»> of new databases, price changes, etc. «< 

COREFULL is set ON as an alias for 15,9,623,810,275,624,636,621,813,16,160,148,20. 

COREABS is set ON as an alias for 77,35,593,65,2,233,99,473,474,475. 

COREALL is set ON as an alias for COREFULL, COREABS . 

SOFTFULL is set ON as an alias for 278,634,256, 

EUROFULL is set ON as an alias for 348,349. 

JAPOABS is set ON as an alias for 347. 

HEALTHFULL is set ON as an alias for 442,149,43,444. 

HEALTHABS is set ON as an alias for 5,73,151,155,34,434. 

DRUGFULL is set ON as an alias for 455,129,130. 



DRUGABS is set ON as an ^Kas for 74,42. 
INSURANCEFULL is set ON as an alias for 625,637. 
INSURANCEABS is set ON as an alias for 169. 
TRANSPORTFULL is set ON as an alias for 80,637. 
TRANSPORTABS is set ON as an alias for 108,6,63. 

ADVERTISINGFULL is set ON as an alias for 635, 570, PAPERSMJ, PAPERSEU , 
INVENTORYABS is set ON as an alias for 8,14,94,6,34,434,7. 
BANKINGFULL is set ON as an alias for 625,268,626,267. 
BANKINGABS is set ON as an alias for 139. 

HEALTHALL is set ON as an alias for COREFULL, COREABS, HEALTHFUL!, HEALTHABS . 
INSURANCEALL is set ON as an alias for COREFULL, COREABS, INSURANCEFULL, INSURANCEABS . 
RESERVATIONALL is set ON as an alias for COREFULL, COREABS. 
OPERATIONSALL is set ON as an alias for COREFULL, COREABS, INVENTORYABS . 
TRANSPORTALL is set ON as an alias for COREFULL, COREABS, TRANSPORTFULL, TRANSPORTABS . 
ADVERTISINGALL is set ON as an alias for COREFULL, COREABS, ADVERTISINGFULL . 
SHOPPINGALL is set ON as an alias for COREFULL, COREABS, ADVERTISINGALL, 47 . 
INVENTORYALL is set ON as an alias for COREFULL, COREABS, I NVENTORYFULL. 
BANKINGALL is set ON as an alias for COREFULL, COREABS, BANKINGFULL, BANKINGABS . 
PORTFOLIOALL is set ON as an alias for COREFULL, COREABS, BANKINGALL . 
TRADINGALL is set ON as an alias for COREFULL, COREABS, BANKINGALL. 
CREDITALL is set ON as an alias for COREFULL, COREABS, BANKINGALL . 
FUNDSALL is set ON as an alias for COREFULL, COREABS, BANKINGALL, 608 . 
SYSTEM: HOME 

Menu System II: D2 version 1.7.8 term=ASCII 

*** DIALOG HOMEBASE(SM) Main Menu *** 



Information : 

1. Announcements (new files, reloads, etc.) 

2. Database, Rates, & Command Descriptions 

3. Help in Choosing Databases for Your Topic 

4. Customer Services (telephone assistance, training, seminars, etc.) 

5. Product Descriptions 

Connections : 

6. DIALOG (R) Document Delivery 

7. Data Star(R) 

(c) 2000 The Dialog Corporation pic All rights reserved. 

/H ^ Help /L = Logoff /NOMENU = Command Mode 



Enter an option number to view information or to connect to an online 
service. Enter a BEGIN command plus a file number to search a database 
(e.g. , Bl for ERIC) . 
?b corefull, coreabs 

06aug01 13:28:08 User242933 Session D52 . 1 
$0.00 0.200 DialUnits FileHomeBase 
$0,00 Estimated cost FileHomeBase 
$0.01 TYMNET 

$0.01 Estimated cost this search 

$0.01 Estimated total session cost 0.200 DialUnits 



SYSTEM: OS - DIALOG OneSearch 

File 15:ABI/Inform(R) 1971-2001/Aug 04 

(c) 2001 ProQuest Inf o&Learning 
File 9:Business & Industry(R) Jul/1994-2001/Aug 03 

(c) 2001 Resp. DB Svcs . 
File 623: Business Week 1985-2001/Aug Wl 

(c) 2001 The McGraw-Hill Companies Inc 
File 810: Business Wire 1986-1999/Feb 28 

(c) 1999 Business Wire 
File 275: Gale Group Computer DB(TM) 1983-2001/Aug 02 

(c) 2001 The Gale Group 
File 624:McGraw-Hill Publications 1985-2001/Aug 03 



(c) 2001 McGraw^Kll Co. Inc 

File 636: Gale Group Newsletter DB(TM) 1987-2001/Aug 03 

(c) 2001 The Gale Group 
File 621: Gale Group New Prod.Annou. (R) 1985-2001/Aug 03 

(c) 2001 The Gale Group 
File 813: PR Newswire 1987-1999/Apr 30 

(c) 1999 PR Newswire Association Inc 
File 16: Gale Group PROMT (R) 1990-2001/Aug 03 

(c) 2001 The Gale Group 
File 160:Gale Group PROMT(R) 1972-1989 

(c) 1999 The Gale Group 
File 148: Gale Group Trade & Industry DB 1976-2001/Aug 03 

(c)2001 The Gale Group 
File 20:World Reporter 1997-2001/Aug 06 

(c) 2001 The Dialog Corporation 
♦File 20: Duplicate Detection has been restored to file 20, 
File 77 : Conference Papers Index 1973-2001/ Jul 

(c) 2001 Cambridge Sci Abs 
File 35: Dissertation Abs Online 1861-2001/ Jul 

(c) 2001 ProQuest Inf o&Learning 
File 593:KOMPASS Central/Eastern Europe 2001/ Jul 

(c) 2001 KOMPASS Intl. 
File 65: Inside Conferences 1993-2001/Aug Wl 

(c) 2001 BLDSC all rts . reserv. 
*File 65: For variance in UDs please see Help News65. 
File 2:INSPEC 1969-2001/Aug Wl 

(c) 2001 Institution of Electrical Engineers 
File 233: Internet & Personal Comp. Abs. 1981-2001/Aug 

(c) 2001 Info. Today Inc. 
File 99: Wilson Appl . Sci & Tech Abs 1983-2001/ Jun 

(c) 2001 The HW Wilson Co, 
File 473: FINANCIAL TIMES ABSTRACTS 1998-2001/APR 02 

(c) 2001 THE NEW YORK TIMES 
*File 473: This file will not update after March 31, 2001, 
It will remain on Dialog as a closed file. 

File 474:New York Times Abs 1969-2001/Aug 04 

(c) 2001 The New York Times 
File 475: Wall Street Journal Abs 1973-2001/Aug 06 

(c) 2001 The New York Times 



Set Items Description 



?s (certificate) and (public or private or secret) and (key or keys) and (fragment or c 
ount or date or meter or value or amount or weight or size or register or zip or zipcod 
e) and (indicia or indicium) and (postal or postage) 
Processing 

Processed 10 of 23 files . . . 
Processing 

Processed 20 of 23 files . . . 
Completed processing all files 



230554 


CERTIFICATE 


7606694 


PUBLIC 


3467291 


PRIVATE 


375999 


SECRET 


3834412 


KEY 


195542 


KEYS 


45323 


FRAGMENT 


636812 


COUNT 


2907408 


DATE 


193258 


METER 


4750746 


VALUE 


2480666 


AMOUNT 


695126 


WEIGHT 


2466242 


SIZE 


508066 


REGISTER 


88197 


ZIP 


1299 


ZIPCODE 



2760 INDICi; 
149 INDICIUM 
183218 POSTAL 
54 813 POSTAGE 

51 40 (CERTIFICATE) AND (PUBLIC OR PRIVATE OR SECRET) AND (KEY 

OR KEYS) AND (FRAGMENT OR COUNT OR DATE OR METER OR VALUE 
OR AMOUNT OR WEIGHT OR SIZE OR REGISTER OR ZIP OR 
ZIPCODE) AND (INDICIA OR INDICIUM) AND (POSTAL OR 
POSTAGE) 

?s si and meter 

40 Si 
193258 METER 

52 15 SI AND METER 
?type s2/3,abs/all 

»>"ABS" is not a valid format name in file(s): 2, S, 15-16, 20, 35, 65, 
77, 99, 148, 160, 233, 275, 473-475, 593, 621, 623-624, 636, 810, 813 
?type s2/3,ab/all 

»>No matching display code(s) found in file(s): 65, 593, 623-624, 810, 813 

2/3,AB/l (Item 1 from file: 15) 

DIALOG (R) File 15 : ABI/Inf orm(R) 

(c) 2001 ProQuest Inf o&Learning. All rts . reserv. 

01779500 04-30491 
Standing out crime 
Bruno, Lee 

Data Communications v28n2 PP: 16 Feb 1999 ISSN: 0363-6399 JRNL CODE: 
DCM 

WORD COUNT: 189 

ABSTRACT: Counterfeiters have been messing with postal meters, ripping 
off the US Postal Service to the tune of $100 million a year. But PKI ( 

public key infrastructure) technology could help staunch the flow of 

illicit dollars - and let customers buy postage online. 



2/3,AB/2 (Item 1 from file: 9) 

DIALOG (R) File 9: Business & Industry (R) 
(c) 2001 Resp. DB Svcs . All rts. reserv. 

02236322 

USPS To Use PKI To Offer Electronic Postage 

(US Postal Service moves closer to selling postage online after 
establishing public- key infrastructure; service will use PKI as part 
of Information-Based Indicia Program) 

Newsbytes News Network, p N/A 

September 10, 1998 

DOCUMENT TYPE: Journal ISSN: 0983-1592 (United States) 
LANGUAGE: English RECORD TYPE: Fulltext 
WORD COUNT: 528 

ABSTRACT: 

The US Postal Service is moving toward selling postage online, having 
set up a public -key infrastructure in 8/98. PKI will be used as part of 
the Information-Based Indicia Program (IBIP) , which sells postage via 
the Internet, letting users print bar codes on envelopes or labels from 
printers at their home offices or in small businesses. Each of the digital 
stamps consists of a bar code that has unique, scannable data. The US 
Postal Service is losing about $100 mil per year due to meter tampering, 
according to postal officials. Meters represent some $21 bil per year in 
revenues. Cylink Corp (Sunnyvale, CA) provided the PKI system, which will 
create authorization certificates, audit transactions and recover 
interrupted transactions and revoke certificates. The full text further 
discusses the topic. 



2/3,AB/3 (Item 1 frSlrfile: 810) 

DIALOG (R) File 810: Business Wire 
(c) 1999 Business Wire . All rts . reserv. 

0793949 BW0360 

SPYRUS: SPYRUS Unveils New Desktop Security for Electronic Postage 
Metering 

January 12, 1998 

Byline: Business Editors and High-Tech Writers 



2/3,AB/4 (Item 1 from file: 275) 

DIALOG (R) File 275: Gale Group Computer DB(TM) 
(c) 2001 The Gale Group, All rts. reserv. 

02221072 SUPPLIER NUMBER: 21154848 (USE FORMAT 7 OR 9 FOR FULL TEXT) 

USPS To Use PKI To Offer Electronic Postage 09/10/98. 
Newsbytes, n95, pNA 
Sept 10, 1998 

LANGUAGE: English RECORD TYPE: Full text 

WORD COUNT: 562 LINE COUNT: 00050 



2/3,AB/5 (Item 2 from file: 275) 

DIALOG (R) File 275: Gale Group Computer DB(TM) 
(c) 2001 The Gale Group. All rts. reserv, 

02218111 SUPPLIER NUMBER: 21128822 (USE FORMAT 7 OR 9 FOR FULL TEXT) 

USPS will use a PKI to manage electronic postage. ( public key 

infrastructure for Postal Service's Indicia program) (Government 

Activity) 

Mayer, Merry 

Government Computer News, vl7, n29, pl4(l) 
Sept 1, 1998 

ISSN: 0738-4300 LANGUAGE: English RECORD TYPE: Fulltext 

WORD COUNT: 538 LINE COUNT: 00047 



2/3,AB/6 (Item 3 from file: 275) 

DIALOG (R) File 275: Gale Group Computer DB(TM) 
(c) 2001 The Gale Group, All rts. reserv. 

02197540 SUPPLIER NUMBER: 20912092 (USE FORMAT 7 OR 9 FOR FULL TEXT) 

Stairping Out Fraud. (US Postal Service is creating digital certificates 
for postage metering machines) (Government Activity) 

Kerstetter, Jim 

PC Week, vl5, n28, pl4(l) 

July 13, 1998 

ISSN: 0740-1604 LANGUAGE: English RECORD TYPE: Fulltext 

WORD COUNT: 4 02 LINE COUNT: 00035 



2/3, AB/1 (Item 1 from file: 636) 

DIALOG (R) File 636: Gale Group Newsletter DB (TM) 
(c) 2001 The Gale Group. All rts. reserv, 

03951852 Supplier Number: 50295217 
USPS To Use PKI To Offer Electronic Postage 09/10/98 
Newsbytes, pN/A 
Sept 10, 1998 

Language: English Record Type: Fulltext 
Article Type: Article 

Document Type: Newswire; General Trade 
Word Count: 536 




• # 

2/3,AB/8 (Item 2 from file: 636) 

DIALOG (R) File 636: Gale Group Newsletter DB(TM) 
(c) 2001 The Gale Group. All rts . reserv. 

03801533 Supplier Number: 48242468 

HOBBY MARKETS ONLINE AUCTIONS PUT AVID DEALERS, COLLECTORS IN TOUCH WITH 
EACH OTHER 

Information & Interactive Services Report, vl9, n2, pN/A 
Jan 23, 1998 

Language: English Record Type: Fulltext 
Document Type: Newsletter; Trade 
Word Count: 1463 



2/3,AB/9 (Item 1 from file: 621) 

DIALOG(R) File 621:Gale Group New Prod.Annou. (R) 
(c) 2001 The Gale Group. All rts. reserv. 

01597722 Supplier Number: 48218951 

SPYRUS Unveils New Desktop Security for Electronic Postage Metering. 
Business Wire, p01120360 
Jan 12, 1998 

Language: English Record Type: Fulltext 
Document Type: Newswire; Trade 
Word Count: 897 



2/3,AB/10 (Item 1 from file: 16) 

DIALOG (R) File 16: Gale Group PROMT (R) 

(c) 2001 The Gale Group. All rts. reserv. 

06120131 Supplier Number: 53735690 

Stamping Out Crime. (US Postal Service selling stamps over 
Internet) (Government Activity) 

Bruno, Lee 

Data Communications, pl6(l) 
Feb 7, 1999 

Language: English Record Type: Fulltext 
Document Type: Magazine/ Journal ; Trade 
Word Count: 194 



2/3,AB/ll (Item 2 from file: 16) 

DIALOG (R) File 16: Gale Group PROMT (R) 

(c) 2001 The Gale Group. All rts. reserv. 

05802940 Supplier Number: 50295217 

USPS To Use PKI To Offer Electronic Postage 09/10/98 
Newsbytes, pN/A 
Sept 10, 1998 

Language: English Record Type: Fulltext 
Article Type: Article 

Document Type: Newswire; General Trade 
Word Count: 536 



2/3,AB/12 (Item 3 from file: 16) 

DIALOG (R) File 16: Gale Group PROMT (R) 

(c) 2001 The Gale Group. All rts. reserv. 

05418087 Supplier Number: 48218951 

SPYRUS Unveils New Desktop Security for Electronic Postage Metering. 
Business Wire, p01120360 
Jan 12, 1998 

Language: English Record Type: Fulltext 



Document Type: Newswire;^Kade 
Word Count: 897 



2/3,AB/13 (Item 1 from file: 148) 

DIALOG (R) File 148: Gale Group Trade & Industry DB 
(c)2001 The Gale Group, All rts . reserv. 

10459804 SUPPLIER NUMBER: 21128822 (USE FORMAT 7 OR 9 FOR FULL TEXT) 

USPS will use a PKI to manage electronic postage. ( public key 

infrastructure for Postal Service's Indicia program) (Government 

Activi ty) 

Mayer, Merry 

Government Computer News, vl7, n29, pl4(l) 
Sept 1, 1998 

ISSN: 0738-4300 LANGUAGE: English RECORD TYPE: Fulltext 

WORD COUNT: 538 LINE COUNT: 00047 



2/3,AB/14 (Item 2 from file: 148) 

DIALOG (R) File 148: Gale Group Trade & Industry DB 
(c)2001 The Gale Group. All rts. reserv. 

10322918 SUPPLIER NUMBER: 20912092 (USE FORMAT 7 OR 9 FOR FULL TEXT) 

Stamping Out Fraud. (US Postal Service is creating digital certificates 
for postage metering machines) (Government Activity) 

Kerstetter, Jim 

PC Week, vl5, n28, pl4(l) 

July 13, 1998 

ISSN: 0740-1604 LANGUAGE: English RECORD TYPE: Fulltext 

WORD COUNT: 402 LINE COUNT: 00035 



2/3,AB/15 (Item 1 from file: 233) 

DIALOG (R) File 233: Internet & Personal Comp , Abs . 
(c) 2001 Info. Today Inc. All rts. reserv. 

00501510 98PK07-107 

Stainping out fraud — Postal Service will use certificates to curb 
meter malfeasance 

Kerstetter, Jim 

PC WEEK , July 13, 1998 , vl5 n28 pl4, 1 Page(s) 
ISSN: 0740-1604 

Reports that the U.S. Postal Service will announce that it is building 
a public - key infrastructure (PKI) for its Information Based Indicia 

Program (IBIP) , a plan to create digital certificates for postage 
metering machines. Reports that Cylink Corp. of Sunnyvale, CA, has built 
the PKI for the Postal Service and will host a pilot project in northern 
Virginia and the San Francisco Bay area. States that Cylink is using X, 509 
Version 3 certificates for the Postal PKI, which will be running off a 
SPARC-based server. Notes that while Postal officials are quiet, there is 
speculation that the IBIP is the first step toward the creation of a 
long-awaited Postal Service-run certificate authority, though notes 
such plans were discussed once before and set aside. Includes one screen 
display, (bjp) 

July 13, 1998 
?type s2/3, kwic/all 

>>>KWIC option is not available in file(s): 7 

2/3,KWIC/l (Item 1 from file: 15) 

DIALOG (R) File 15 : ABI/Inf orm (R) 

(c) 2001 ProQuest Inf o&Learning . All rts. reserv, 

01779500 04-30491 
Stamping out crime 

Bruno, Lee 

Data Communications v28n2 PP: 16 Feb 1999 





ISSN: 0363-6399 JRNL COWT DCM 
WORD COUNT: 189 



ABSTRACT: Counterfeiters have been messing with postal meters, ripping 
off the US Postal Service to the tune of $100 million a year. But PKI ( 

public key infrastructure) technology could help staunch the flow of 

illicit dollars - and let customers buy postage online. 

TEXT: COUNTERFEITERS HAVE been messing with postal meters, ripping off 
the U.S. Postal Service (Washington, D.C.) to the tune of $100 million a 
year. But PKI (public key infrastructure) technology could help staunch 
the flow of illicit dollars-and let customers buy postage online. The 
Information Based Indicia Program (IBIP) from the U.S. Postal Service 
lets owners of special digital meters download 

postage over the Internet. Its PKI server issues each meter a digital 
certificate that authenticates the device, and end-users can then print 
the postage on envelopes in the form of bar codes. Eventually, the 
postal service wants to start downloading postage directly to desktop 
PCs, allowing users to run out the bar codes via networked printers. The 
PKI for the U.S. Postal Service is scalable enough to generate and manage 
300 million certificates. Developed by Cylink Corp. (Sunnyvale, Calif.), 
it*s now housed at the vendor's 



headquarters, but the U.S. Postal Service will take charge of it in the 
next few months,. Related 'Net-ready products already are starting to show 
Estamp Inc. (Palo Alto, Calif.) is now selling $300 postage meters with 
bundled digital certificates, -Lee Bruno (San Mateo, Calif.).... 



DESCRIPTORS: Postal & delivery services... 



2/3,KWIC/2 (Item 1 from file: 9) 

DIALOG(R) File 9:Business & Industry{R) 
(c) 2001 Resp. DB Svcs . All rts . reserv. 

02236322 (USE FORMAT 7 OR 9 FOR FULLTEXT) 
USPS To Use PKI To Offer Electronic Postage 

(US Postal Service moves closer to selling postage online after 
establishing public- key infrastructure; service will use PKI as part 
of Information-Based Indicia Program) 

Newsbytes News Network, p N/A 

September 10, 1998 

DOCUMENT TYPE: Journal ISSN: 0983-1592 (United States) 
LANGUAGE: English RECORD TYPE: Full text 
WORD COUNT: 528 

(USE FORMAT 7 OR 9 FOR FULLTEXT) 
USPS To Use PKI To Offer Electronic Postage 

(US Postal Service moves closer to selling postage online after 
establishing public- key infrastructure; service will use PKI as part 
of Information -Based Indicia Program) 

ABSTRACT: 

The US Postal Service is moving toward selling postage online, having 
set up a public -key infrastructure in 8/98. PKI will be used as part of 
the Information-Based Indicia Program (IBIP), which sells postage via 
the Internet, letting users print bar codes on envelopes or labels from 
printers at. . . 

...the digital stamps consists of a bar code that has unique, scannable 
data. The US Postal Service is losing about $100 mil per year due to 
meter tampering, according to postal officials. Meters represent some 
$21 bil per year in revenues. Cylink Corp (Sunnyvale, CA) provided... 

TEXT: 

...S.A., 1998 SEP 10 (NB) — By Merry Mayer, Government Computer News. The 
U.S. Postal Service moved a step closer to selling postage online after 



it established a ptablic 




sy infrastructure last month. 




The service will use a PKI as part of the Information-Based Indicia 
Program (IBIP) , a program for selling postage over the Internet by 
letting users print bar codes on envelopes or labels from printers... 

...stamps has a bar code that provides unique, scannable information. The 
bar code stores the postage amount , user licensingv source and 
destination ZIP codes, along with date and time of postage printing. 

The program will help the public buy postage more easily, officials 
said. 

The system will also "stem losses from criminal tampering of postage 
meters, counterfeiting of indicia and systemic audit and control 
weaknesses," a Postal Service official said. 

The service loses about $100 million a year from meter tampering, postal 

officials said. Meters account for about $21 billion in revenue a year. 
Postal Service officials said. 

The service's PKI will ensure secure transactions for online buyers, IBIP 
program manager Roy Gordon said. A digital certificate establishes the 
identity of the device; a signature ensures the integrity of the message. 



...the Internet Engineering Task Force's X.509 Version 3 digital signature 
specification, which lets certificate authorities read and understand one 
another, Morbitzer said. 

The Cylink PKI system the service will use is designed to produce hundreds 
of millions of digital certificates, Morbitzer said. 

The Postal Service plans to issue digital certificates to companies that 
develop the software and hardware used to sell online postage . The 
companies then sell digital certificates to individuals or companies that 
want to buy postage online, Morbitzer said. 

The Postal Service sets the standards for the software and hardware, the 
vendors develop their products, and the service authorizes their use, 
Gordon said. 

Electronic postage will initially be targeted to small office and home 
office users and will eventually be. . . 

...large mailing systems running in mainframe or client-server environments 
to assist in mail production, postal officials said. 

The Postal Service is beta-testing IBIP services in the Washington area 
and in Northern Virginia. 



The. . . 



It . . . 



...COMPANY NAMES: UNITED STATES POSTAL SERVICE 
...PRODUCT NAMES: National postal service (430000... 



2/3,KWIC/3 (Item 1 from file: 810) 

DIALOG (R) File 810: Business Wire 

(c) 1999 Business Wire . All rts . reserv. 



0793949 



BW0360 



SPYRUS: SPYRUS Unveils New Desktop Security for Electronic Postage 
Metering 



January 12, 1998 



Byline: Business Editors and High-Tech Writers 

SPYRUS Unveils New Desktop Security for Electronic Postage Metering 
...Data Security Conference 

Neopost PC Stamp Application Uses the SPYRUS LYNKS 

Metering Device for Electronic Postage Downloading and Envelope 

Stamp Printing 

SAN FRANCISCO— (BUSINESS WIRE)— Jan. 12, 1998 — SPYRUS Monday 
announced that its desktop LYNKS Metering Device (LMD) has been 
selected for secure electronic postage and printing as part of the 
Neopost PC Stamp electronic postage meter system. 

These new meters, to be available later in 1998, are part of 
the United States Postal Service (USPS) Information Based Indicia 
Program (IBIP) to replace older mechanical systems with new 
generation products for directly printing stamps... 

...will benefit the small-office home-office (SOHO) and 
commercial markets through electronic downloading of postage and 
more exacting financial control over postage usage. 

There are an estimated 10 million SOHO postage meter users that 
will be served by suppliers of this new class of product. 

The SPYRUS LYNKS Metering Device is about the size of an 
external modem and connects directly to a standard PC, Driven by an 
accompanying PC software application, it securely loads and stores 

postage value , and an electronic stamp in the form of a two 
dimensional bar code is printed. . . 

...the USPS to expedite processing and improve 
efficiency of mail delivery. 

In order to guarantee postage integrity, accurate downloading, and 
to prevent fraud, SPYRUS* public key cryptographic technologies are 
used for digital signature, certificate processing and electronic 
money metering. 

The SPYRUS LYNKS Metering Device was developed in close cooperation 
with Neopost, a leading worldwide manufacturer and distributor of 

postage processing equipment used in metering systems, shipping, and 
document handling, Neopost will be demonstrating the,., 

...week. Neopost designed the custom 

extensions to the IBIP specifications, allowing smooth communications 
with their Postage -on-Call system and their digital scales. PC 
Stamp, scheduled to enter beta testing later. . . 

. . .will be 

marketed by Neopost directly and as part of bundled office software 
packages . 

"The key issue in obtaining approval from the USPS for this type 
of product is security," said... 

...3 device and will include active tamper 

detection and automatic protection of essential values. In postage 
meter applications, these features ensure that the postal values 
stored in the LMD cannot be used fraudulently, 
"The LMD's security is contained,,. 

. . .of 

businesses to have access to professional mailing capabilities at a 
fraction of today *s postage meter costs." 

The USPS IBIP will eventually expand to include other classes of 
users, including high, . . 

...MIME, and Microsoft Authenticode technology. The company's 
products are used with a variety of certificate authority products to 



provide critical inf rast^rcture support for issuance and nSmagement 
of a deployed hardware... 



2/3,KWIC/4 (Item 1 from file: 275) 

DIALOG (R) File 275: Gale Group Computer DB(TM) 
(c) 2001 The Gale Group. All rts , reserv. 

02221072 SUPPLIER NUMBER: 21154848 (USE FORMAT 7 OR 9 FOR FULL TEXT) 

USPS To Use PKI To Offer Electronic Postage 09/10/98. 
Newsbytes, n95, pNA 
Sept 10, 1998 

LANGUAGE: English RECORD TYPE: Full text 

WORD COUNT: 562 LINE COUNT: 00050 

USPS To Use PKI To Offer Electronic Postage 09/10/98. 
TEXT: 

...S.A., 1998 SEP 10 (NB) — By Merry Mayer, Government Computer News. 
The U.S. Postal Service moved a step closer to selling postage online 
after it established a public -key infrastructure last month. 

The service will use a PKI as part of the Information-Based Indicia 
Program (IBIP) , a program for selling postage over the Internet by 
letting users print bar codes on envelopes or labels from printers... 

...stamps has a bar code that provides unique, scannable information. The 
bar code stores the postage amount , user licensing, source and 
destination ZIP codes, along with date and time of postage printing. 

The program will help the public buy postage more easily, 
officials said. 

The system will also "stem losses from criminal tampering of postage 
meters, counterfeiting of indicia and systemic audit and control 
weaknesses," a Postal Service official said. 

The service loses about $100 million a year from meter tampering, 
postal officials said. Meters account for about $21 billion in revenue a 
year, Postal Service officials said. 

The service's PKI will ensure secure transactions for online buyers, 
IBIP program manager Roy Gordon said. A digital certificate establishes 
the identity of the device; a signature ensures the integrity of the 
message . 

The . . . 

...the Internet Engineering Task Force's X.509 Version 3 digital signature 
specification, which lets certificate authorities read and understand one 
another, Morbitzer said. 

The Cylink PKI system the service will use is designed to produce 
hundreds of millions of digital certificates, Morbitzer said. 

The Postal Service plans to issue digital certificates to companies 
that develop the software and hardware used to sell online postage . The 
companies then sell digital certificates to individuals or companies that 
want to buy postage online, Morbitzer said. 

The Postal Service sets the standards for the software and hardware, 
the vendors develop their products, and the service authorizes their use, 
Gordon said. 

Electronic postage will initially be targeted to small office and 
home office users and will eventually be... 

...large mailing systems running in mainframe or client-server environments 
to assist in mail production, postal officials said. 

The Postal Service is beta-testing IBIP services in the Washington 
area and in Northern Virginia. 

It. . . 
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USPS will use a PKI to manage electronic postage. ( public key 
infrastructure for Postal Service's Indicia program) (Government 
Activity) 

TEXT: 

The Postal Service moved a step closer to selling postage online 
after it established a public -key infrastructure last month. 

The service will use a PKI as part of the Information-Based Indicia 
Program, a program for selling postage over the Internet by letting users 
print bar codes on envelopes or labels from printers... 

...stamps has a bar code that provides unique, scannable information. The 
bar code stores the postage amount , user licensing, source and 
destination ZIP codes, along with date and time of postage printing. 

The program will help the public buy postage more easily, 
officials said. 

The system will also "stem losses from criminal tampering of postage 
meters, counterfeiting of indicia and systemic audit and control 
weaknesses," a Postal Service official said. 

The service loses about $100 million a year from meter tampering, 
postal officials said. Meters account for about $21 billion in revenue a 
year. Postal Service officials said. 

The service's PKI will ensure secure transactions for online buyers, 
IBIP program manager Roy Gordon said. A digital certificate establishes 
the identity of the device; a signature ensures the integrity of the 
message . 

The. . . 



...the Internet Engineering Task Force's X.509 Version 3 digital signature 
specification, which lets certificate authorities read and understand one 
another, Morbitzer said. 

The Cylink PKI system the service will use is designed to produce 
hundreds of millions of digital certificates, Morbitzer said. 

The Postal Service plans to issue digital certificates to companies 
that develop the software and hardware used to sell online postage . The 
companies then sell digital certificates to individuals or companies that 
want to buy postage online, Morbitzer said. 

The Postal Service sets the standards for the software and hardware, 
the vendors develop their products, and the service authorizes their use, 
Gordon said . 

Electronic postage will initially be targeted to small office and 
home office users and will eventually be... 

...large mailing systems running in mainframe or client-server environments 
to assist in mail production, postal officials said. 

The Postal Service is beta-testing IBIP services in the Washington 
area and in Northern Virginia. 

It. . . 
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Stamping Out Fraud. (US Postal Service is creating digital certificates 
for postage metering machines) (Government Activity) 

TEXT: 

Postal Service will use certificates to curb meter malfeasance 
The U.S. Postal Service is dipping a toe into the Internet security 

pool by applying digital certificate technologies to machines instead of 

users . 

The Postal Service will announce this week that it is building a PKI 
(public -key infrastructure) for its IBIP (Information Based Indicia 
Program), which is the Postal Service's plan to combat more than $100 
million in mail fraud by creating digital certificates for postage 
metering machines . 

"This project has been in the works for some time now, and what we are 
concerned about is preventing fraud (in the Postal Service's $21 billion 
postage metering channel)," said Nancy Russell, a spokeswoman for IBIP, in 
Washington . 

Although Postal Service officials are mum on the subject, there is 
speculation that IBIP is the first step toward the creation of a 
long-awaited Postal Service-run certificate authority. 

Talk of such a certificate authority, which would place the Postal 
Service in the center of electronic commerce, emerged more than two years 
ago. But early. . . 

. . .management team. 

For now, Cylink Corp., of Sunnyvale, Calif., has built the PKI for the 
Postal Service's IBIP and will host a pilot project that starts this week 
in northern Virginia. It will expand to the San Francisco Bay area within a 
month . 

The Postal PKI, as it is being called, runs off a SPARC-based 
server. The Postal Service has set up its own space in Cylink 's 
headquarters for attaching certificates to... 

...are legitimate machines with legitimate prices, Cylink officials said. 

Because of the massive scalability the Postal Service will require 
when it takes the Postal PKI project in-house and national early next 
year, Cylink had to make sure that... 

...data field that gives identifying marks and prices that fit the 
particular needs of the Postal Service. The PKI will also interoperate 
with a variety of algorithms, including elliptic curve, RSA. . . 

... support both Microsoft Corp.'s CryptoAPI and Intel Corp.'s Common Data 
Security Architecture. 

The Postal Service's PKI will certify metering machines. 

...DESCRIPTORS: United States. Postal Service... 

...Public Key Encryption 
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USPS To Use PKI To Offer Electronic Postage 09/10/98 
TEXT: 

...S.A., 1998 SEP 10 (NB) -- By Merry Mayer, Government Computer News. The 
U.S. Postal Service moved a step closer to selling postage online after 
it established a public -key infrastructure last month. 

The service will use a PKI as part of the Information-Based Indicia 
Program (IBIP) , a program for selling postage over the Internet by 
letting users print bar codes on envelopes or labels from printers... 

...stamps has a bar code that provides unique, scannable information. The 
bar code stores the postage amount / user licensing, source and 
destination ZIP codes, along with date and time of postage printing. 

The program will help the public buy postage more easily, 
officials said. 

The system will also "stem losses from criminal tampering of postage 
meters, counterfeiting of indicia and systemic audit and control 
weaknesses, " a Postal Service official said. 

The service loses about $100 million a year from meter tampering, 
postal officials said. Meters account for about $21 billion in revenue a 
year. Postal Service officials said. 

The service's PKI will ensure secure transactions for online buyers, 
IBIP program manager Roy Gordon said, A digital certificate establishes 
the identity of the device; a signature ensures the integrity of the 
message . 

The. . . 

...the Internet Engineering Task Force's X.509 Version 3 digital signature 
specification, which lets certificate authorities read and understand one 
another, Morbitzer said. 

The Cylink PKI system the service will use is designed to produce 
hundreds of millions of digital certificates, Morbitzer said. 

The Postal Service plans to issue digital certificates to companies 
that develop the software and hardware used to sell online postage . The 
companies then sell digital certificates to individuals or companies that 
want to buy postage online, Morbitzer said. 

The Postal Service sets the standards for the software and hardware, 
the vendors develop their products, and the service authorizes their use, 
Gordon said. 

Electronic postage will initially be targeted to small office and 
home office users and will eventually be... 

...large mailing systems running in mainframe or client-server environments 
to assist in mail production, postal officials said. 

The Postal Service is beta-testing IBIP services in the Washington 
area and in Northern Virginia. 

It. . . 
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note on the bid ^mtus of each. 
Here's how the online auction works: 

* Dealers register with the service and list items they will send to 
the high bidder following a. . . 

...items at a price much lower than their bid prices, "The majority pay a 
significant amount less than their highest bid and they are ecstatic, " 
Dick said. "That's one thing. ..more than 3,800 lodging properties 
worldwide. LodgeNet, contact Ann Parker, (605) 988- 1330. 

* Secure Postage Metering 

NetPost Jan. 12 selected the Spyrus desktop Lynks Metering Device 
(LMD) for secure electronic postage and printing as part of the United 
States Postal Services Information Based Indicia Program. The program, 
which will replace older mechanical systems with new-generation processes 
for directly. , , 

, . .printers, will benefit small office-home office (SOHO) and commercial 
markets through electronic download of postage . Spyrus estimates the 
program will serve about 10 million SOHO postage meter users. The LMDs, 
which will be available later this year, are about the size of an 
external modem and connect directly to a standard personal computer. To 
guarantee postage integrity, accurate downloading and prevent fraud, 
Spyrus* public key cryptographic technologies are used for digital 
signature, certificate processing and electronic money metering. Spyrus 
is a leading developer of transaction communications devices. Spyrus... 

...Solutions Inc. and Dun & Bradstreet Corp. (D&B) . Companies can go to 
either site to register their domain names, then obtain a D&B D- U-N-S 
number. The two... 
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SPYRUS Unveils New Desktop Security for Electronic Postage Metering. 
TEXT: 

. . .Monday announced that its desktop LYNKS Metering Device (LMD) has been 
selected for secure electronic postage and printing as part of the 
Neopost PC Stamp electronic postage meter system. 

These new meters, to be available later in 1998, are part of the 
United States Postal Service (USPS) Information Based indicia Program 
(IBIP) to replace older mechanical systems with new generation products for 
directly printing stamps... 

. . .will benefit the small-office home-office (SOHO) and commercial markets 
through electronic downloading of postage and more exacting financial 
control over postage usage. 

There are an estimated 10 million SOHO postage meter users that 
will be served by suppliers of this new class of product. 

The SPYRUS LYNKS Metering Device is about the size of an external 
modem and connects directly to a standard PC. Driven by an accompanying PC 
software application, it securely loads and stores postage value , and 
an electronic stamp in the form of a two dimensional bar code is printed... 

...the USPS to expedite processing and improve efficiency of mail delivery. 

In order to guarantee postage integrity, accurate downloading, and 
to prevent fraud, SPYRUS* piiblic key cryptographic technologies are 



used for digital signatu^^ certificate processing and ei^^tronic money 
metering . 

The SPYRUS LYNKS Metering Device was developed in close cooperation 
with Neopost, a leading worldwide manufacturer and distributor of postage 
processing equipment used in metering systems, shipping, and document 
handling. Neopost will be demonstrating the... 

...week. Neopost designed the custom extensions to the IBIP specifications, 
allowing smooth communications with their Postage -on-Call system and 
their digital scales. PC Stamp, scheduled to enter beta testing later... 
. . .will be marketed by Neopost directly and as part of bundled office 
software packages. 

"The key issue in obtaining approval from the USPS for this type of 
product is security," said... 

...3 device and will include active tamper detection and automatic 
protection of essential values. In postage meter applications, these 
features ensure that the postal values stored in the LMD cannot be used 
fraudulently. 

"The LMD's security is contained... 

...of businesses to have access to professional mailing capabilities at a 
fraction of today *s postage meter costs." 

The USPS IBIP will eventually expand to include other classes of 
users, including high... 

...MIME, and Microsoft Authenticode technology. The company's products are 
used with a variety of certificate authority products to provide critical 
infrastructure support for issuance and management of a deployed hardware 

PRODUCT NAMES: 357 9514 (Postage Meters) 
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TEXT: 

Counterfeiters have been messing with postal meters, ripping off the U.S. 

Postal Service (Washington, D.C.) to the tune of $100 million a year. But 
PKI (public key infrastructure) technology could help staunch the flow 
of illicit dollars-and let customers buy postage online. The Information 
Based Indicia Program (IBIP) from the U.S. Postal Service lets owners 
of special digital meters download postage over the Internet. Its PKI 
server issues each meter a digital certificate that authenticates the 
device, and end-users can then print the postage on envelopes in the form 
of bar codes. Eventually, the postal service wants to start downloading 
postage directly to desktop PCs, allowing users to run out the bar codes 
via networked printers. The PKI for the U.S. Postal Service is scalable 
enough to generate and manage 300 million certificates. Developed by Cylink 
Corp. (Sunnyvale, Calif.), it's now housed at the vendor's headquarters, 
but the U.S. Postal Service will take charge of it in the next few 
months. Related 'Net-ready products already are starting to show: Estamp 
Inc. (Palo Alto, Calif.) is now selling $300 postage meters with bundled 



digital certificates. 

DESCRIPTORS: United States. Postal Service 
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USPS To Use PKI To Offer Electronic Postage 09/10/98 
TEXT: 

...S.A., 1998 SEP 10 (NB) — By Merry Mayer, Government Computer News. The 
U.S. Postal Service moved a step closer to selling postage online after 
it established a public -key infrastructure last month. 

The service will use a PKI as part of the Information-Based Indicia 
Program (IBIP), a program for selling postage over the Internet by 
letting users print bar codes on envelopes or labels from printers... 

...stamps has a bar code that provides unique, scannable information. The 
bar code stores the postage amount , user licensing, source and 
destination ZIP codes, along with date and time of postage printing. 

The program will help the public buy postage more easily, 
officials said. 

The system will also "stem losses from criminal tampering of postage 
meters, counterfeiting of indicia and systemic audit and control 
weaknesses," a Postal Service official said. 

The service loses about $100 million a year from meter tampering, 
postal officials said. Meters account for about $21 billion in revenue a 
year. Postal Service officials said. 

The service's PKI will ensure secure transactions for online buyers, 
IBIP program manager Roy Gordon said. A digital certificate establishes 
the identity of the device; a signature ensures the integrity of the 
message. 

The. . . 

...the Internet Engineering Task Force's X,509 Version 3 digital signature 
specification, which lets certificate authorities read and understand one 
another, Morbitzer said. 

The Cylink PKI system the service will use is designed to produce 
hundreds of millions of digital certificates, Morbitzer said. 

The Postal Service plans to issue digital certificates to companies 
that develop the software and hardware used to sell online postage . The 
companies then sell digital certificates to individuals or companies that 
want to buy postage online, Morbitzer said. 

The Postal Service sets the standards for the software and hardware, 
the vendors develop their products, and the service authorizes their use, 
Gordon said. 

Electronic postage will initially be targeted to small office and 
home office users and will eventually be. . . 

...large mailing systems running in mainframe or client-server environments 
to assist in mail production, postal officials said. 

The Postal Service is beta-testing IBIP services in the Washington 
area and in Northern Virginia. 

It . . . 
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SPYRUS Unveils New Desktop Security for Electronic Postage Metering. 
TEXT: 

...Monday announced that its desktop LYNKS Metering Device (LMD) has been 
selected for secure electronic postage and printing as part of the 
Neopost PC Stamp electronic postage meter system. 

These new meters, to be available later in 1998, are part of the 
United States Postal Service (USPS) Information Based Indicia Program 

(IBIP) to replace older mechanical systems with new generation products for 
directly printing stamps... 

...will benefit the small-office home-office (SOHO) and commercial markets 
through electronic downloading of postage and more exacting financial 
control over postage usage. 

There are an estimated 10 million SOHO postage meter users that 
will be served by suppliers of this new class of product. 

The SPYRUS LYNKS Metering Device is about the size of an external 
modem and connects directly to a standard PC. Driven by an accompanying PC 
software application, it securely loads and stores postage value , and 
an electronic stamp in the form of a two dimensional bar code is printed. . . 

...the USPS to expedite processing and improve efficiency of mail delivery. 

In order to guarantee postage integrity, accurate downloading, and 
to prevent fraud, SPYRUS* public key cryptographic technologies are 
used for digital signature, certificate processing and electronic money 
metering. 

The SPYRUS LYNKS Metering Device was developed in close cooperation 
with Neopost, a leading worldwide manufacturer and distributor of postage 
processing equipment used in metering systems, shipping, and document 
handling. Neopost will be demonstrating the... 

...week. Neopost designed the custom extensions to the IBIP specifications, 
allowing smooth communications with their Postage -on-Call system and 
their digital scales. PC Stamp, scheduled to enter beta testing later... 
. . .will be marketed by Neopost directly and as part of bundled office 
software packages. 

"The key issue in obtaining approval from the USPS for this type of 
product is security," said... 

...3 device and will include active tamper detection and automatic 
protection of essential values. In postage meter applications, these 
features ensure that the postal values stored in the LMD cannot be used 
fraudulently. 

"The LMD's security is contained... 

...of businesses to have access to professional mailing capabilities at a 
fraction of today's postage meter costs." 

The USPS IBIP will eventually expand to include other classes of 
users, including high, . . 

...MIME, and Microsoft Authenticode technology. The company's products are 
used with a variety of certificate authority products to provide critical 
infrastructure support for issuance and management of a deployed hardware 

PRODUCT NAMES: 3579514 (Postage Meters) 
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USPS will use a PKI to manage electronic postage. ( public key 
infrastructure for Postal Service's Indicia program) (Government 
Activity) 

TEXT: 

The Postal Service moved a step closer to selling postage online 
after it established a public -key infrastructure last month. 

The service will use a PKI as part of the Information-Based Indicia 
Program, a program for selling postage over the Internet by letting users 
print bar codes on envelopes or labels from printers... 

...stamps has a bar code that provides unique, scannable information. The 
bar code stores the postage amount , user licensing, source and 
destination ZIP codes, along with date and time of postage printing. 

The program will help the public buy postage more easily, 
officials said. 

The system will also "stem losses from criminal tampering of postage 
meters, counterfeiting of indicia and systemic audit and control 
weaknesses," a Postal Service official said. 

The service loses about $100 million a year from meter tampering, 
postal officials said. Meters account for about $21 billion in revenue a 
year, Postal Service officials said. 

The service's PKI will ensure secure transactions for online buyers, 
IBIP program manager Roy Gordon said. A digital certificate establishes 
the identity of the device; a signature ensures the integrity of the 
message . 

The. . . 



...the Internet Engineering Task Force's X.509 Version 3 digital signature 
specification, which lets certificate authorities read and understand one 
another, Morbitzer said. 

The Cylink PKI system the service will use is designed to produce 
hundreds of millions of digital certificates, Morbitzer said. 

The Postal Service plans to issue digital certificates to companies 
that develop the software and hardware used to sell online postage . The 
companies then sell digital certificates to individuals or companies that 
want to buy postage online, Morbitzer said. 

The Postal Service sets the standards for the software and hardware, 
the vendors develop their products, and the service authorizes their use, 
Gordon said. 

Electronic postage will initially be targeted to small office and 
home office users and will eventually be... 

...large mailing systems running in mainframe or client-server environments 
to assist in mail production, postal officials said. 

The Postal Service is beta-testing IBIP services in the Washington 
area and in Northern Virginia. 

It. . . 
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Stcunping Out Fraud. (US Postal Service is creating digital certificates 
for postage metering machines) (Government Activity) 

TEXT: 

Postal Service will use certificates to curb meter malfeasance 
The U.S. Postal Service is dipping a toe into the Internet security 

pool by applying digital certificate technologies to machines instead of 

users . 

The Postal Service will announce this week that it is building a PKI 
(public -key infrastructure) for its IBIP (Information Based Indicia 
Program), which is the Postal Service's plan to combat more than $100 
million in mail fraud by creating digital certificates for postage 
metering machines. 

"This project has been in the works for some time now, and what we are 
concerned about is preventing fraud (in the Postal Service's $21 billion 
postage metering channel)," said Nancy Russell, a spokeswoman for IBIP, in 
Washington . 

Although Postal Service officials are mum on the subject, there is 
speculation that IBIP is the first step toward the creation of a 
long-awaited Postal Service-run certificate authority. 

Talk of such a certificate authority, which would place the Postal 
Service in the center of electronic commerce, emerged more than two years 
ago . But early. . . 

. . .management team. 

For now, Cylink Corp., of Sunnyvale, Calif., has built the PKI for the 
Postal Service's IBIP and will host a pilot project that starts this week 
in northern Virginia. It will expand to the San Francisco Bay area within a 
month . 

The Postal PKI, as it is being called, runs off a SPARC-based 
server. The Postal Service has set up its own space in Cylink *s 
headquarters for attaching certificates to... 

...are legitimate machines with legitimate prices, Cylink officials said. 

Because of the massive scalability the Postal Service will require 
when it takes the Postal PKI project in-house and national early next 
year, Cylink had to make sure that... 

...data field that gives identifying marks and prices that fit the 
particular needs of the Postal Service. The PKI will also interoperate 
with a variety of algorithms, including elliptic curve, RSA. . . 

...support both Microsoft Corp.'s CryptoAPI and Intel Corp.'s Common Data 
Security Architecture. 

The Postal Service's PKI will certify metering machines. 

DESCRIPTORS: United States. Postal Service... 
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meter malfeasance 

Kerstetter, Jim 

PC WEEK , July 13, 1998 , vl5 n28 pl4, 1 Page(s) 
ISSN: 0740-1604 

Stamping out fraud — Postal Service will use certificates to curb 
meter malfeasance 

Reports that the U.S. Postal Service will announce that it is building 
a public - key infrastructure (PKI) for its Information Based Indicia 

Program (IBIP) , a plan to create digital certificates for postage 
metering machines. Reports that Cylink Corp. of Sunnyvale, CA, has built 
the PKI for the Postal Service and will host a pilot project in northern 
Virginia and the San Francisco Bay area. States that Cylink is using X.509 
Version 3 certificates for the Postal PKI, which will be running off a 
SPARC-based server. Notes that while Postal officials are quiet, there is 
speculation that the IBIP is the first step toward the creation of a 
long-awaited Postal Service-run certificate authority, though notes 
such plans were discussed once before and set aside. Includes one screen. . . 
Descriptors: Certificate Authorities; Federal Government; Security; 

Shipping/ Receiving 
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ISSN: 0740-1604 LANGUAGE: English RECORD TYPE: Fulltext 
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TEXT: 

Postal Service will use certificates to curb meter malfeasance 
The U.S. Postal Service is dipping a toe into the Internet security 

pool by applying digital certificate technologies to machines instead of 

users . 

The Postal Service will announce this week that it is building a 
PKI (public -key infrastructure) for its ibiP (Information Based 
Indicia Program), which is the Postal Service's plan to combat more than 
$100 million in mail fraud by creating digital certificates for postage 
metering machines . 

"This project has been in the works for some time now, and what we are 
concerned about is preventing fraud (in the Postal Service's $21 billion 
postage metering channel)," said Nancy Russell, a spokeswoman for IBIP , 
in Washington. 

Although Postal Service officials are mum on the subject, there is 
speculation that IBIP is the first step toward the creation of a 
long-awaited Postal Service-run certificate authority . 

Talk of such a certificate authority , which would place the 
Postal Service in the center of electronic commerce, emerged more than two 
years ago. But early plans fizzled because of differing priorities of a new 
management team. 

For now, Cylink Corp., of Sunnyvale, Calif., has built the pki for 
the Postal Service's IBIP and will host a pilot project that starts 
this week in northern Virginia. It will expand to the San Francisco Bay 
area within a month. 

The Postal PKI , as it is being called, runs off a SPARC -based 
server. The Postal Service has set up its own space in Cylink *s 
headquarters for attaching certificates to metering machines and 
authenticating that they are legitimate machines with legitimate prices, - 
Cylink officials said. 

Because of the massive scalability the Postal Service will require 
when it takes the Postal PKI project in-house and national early next 
year, Cylink had to make sure that it can interoperate with a wide 
variety of security technologies. 

Cylink is using X.509 Version 3 certificates and has extended them 
with an additional data field that gives identifying marks and prices that 
fit the particular needs of the Postal Service. The PKI will also 
interoperate with a variety of algorithms, including elliptic curve , 
RSA and the Digital Signature Algorithm. It will support both Microsoft 
Corp.'s CryptoAPI and Intel Corp.'s Common Data Security Architecture. 

The Postal Service's PKI will certify metering machines. 
COPYRIGHT 1998 Ziff-Davis Publishing Company 
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Security Solutions, (question and answer) . (Column) 

Cobb, Michael 

e-Business Advisor, 17, 3, 34(1) 
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WORD COUNT: 174 3 LINE COUNT: 0014 6 

... is one application of elliptic curve theory and has become a 

promising new branch of public - key cryptography in recent years. This 
is mainly due to its potential, in some cases, for offering similar 
security to established public - key cryptographic systems, while 
providing both increased performance and decreased key size. (Elliptic 
curves are functions... 

. . .as gently looping lines in the X Y plane. Check out this site 
http://www. certicom . ca /ecc/weccrypt . htm for white papers and tutorials 
on elliptic curves .) Recent improvements in various aspects of 
implementation, including the generation of elliptic curves, have made... 
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New Version of Luna(R) CA(3) , which Enables Secure Transactions for 
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Sep'i 19, 2000 

Ijanguage: English Record Type: Fulltext 
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and Chrysalis -ITS today announced that they have entered into an 
agreement which delivers an elliptic curve -based hardware security 
module for Certicom 's high security wireless Public Key 
Infrastructure (PKI) . Certicom' s MobileTrust (TM) managed CA service 
(www.certicom.com/mobiletrust), launched today at the Certicom PKS event in 
San Jose, will include an optimized version of Luna CA (3), the industry's 
most widely used key management system. Luna CA (3)-ECC has been enhanced 
with Certicom 's elliptic curve cryptography (ECC) protocol, to 
strengthen the security of Certicom 's MobileTrust CA service, ensuring 
best practices for wireless digital certificate issuance. 
Under the terms of the agreement . . . 
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Chrysalis -ITS Goes Wireless, Collaborating With Certicom to Deliver a New 

Version of Luna CA3 , Which Enables Secure Transactions for Wireless 

Devices . 

Business Wire, p0196 
Sept 19, 2000 

Language: English Record Type: Fulltext 
Document Type: Newswire; Trade 
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. . . and Chrysalis -ITS today announced that they have entered into an 

agreement which delivers an elliptic curve -based hardware security 
module for Certicom 's high security wireless Public Key 



Infrastructure (PKI) . Certicom's MobileTrust (TM) managed CA service 
(http://www.chrysalis-its.com/news/partner. . . 

...industry's most widely used key management system. Luna CA3-ECC has been 
enhanced with Certicom 's elliptic curve cryptography (ECC) protocol, 
to strengthen the security of Certicom 's MobileTrust CA service, 
ensuring best practices for wireless digital certificate issuance. 
Under the terms of the agreement... 
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Language: English Record Type: Fulltext 
Document Type: Newswire; Trade 
Word Count: 13 3 0 

... release of a variety of new products for wireless security. WTLS 

Plus (TM) builds on Certicom 's leadership position in developing 
Internet-standard SSL and elliptic curve cryptography (ECC) security 
technologies to enable wireless e-commerce and secure enterprise 
connectivity inside any wireless or WAP computing environment. Through the 
acquisition of Trustpoint of Mountain View, CA , Certicom announced its 
entry into the PKI marketplace. Trustpoint (TM) , a comprehensive line of 
flexible, cross-platform public key infrastructure (PKI) products, 
allows OEMs to develop applications with digital certificate services 
"built-in. " This . . . 
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net . com . 

Certicom is a leading provider of cryptographic technologies for 
computing and communications companies. Certicom 's core technology is the 

Certicom Elliptic Curve Engine (CE)2 a stronger, faster, smaller 
engine that performs public - key encryption and digital signatures 
required for advanced data security. (CE)2 is available for software... 

. . .development is based in Mississauga, Ontario, Canada, with sales and 
marketing operations in San Mateo, CA . Certicom shares are quoted on the 
Toronto Stock Exchange under the symbol "CIC." -0- 
Note. . . 
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Business Wire, p5210079 
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Language: English Record Type: Fulltext 
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... contactless interfaces. 

Certicom is a leading provider of cyrptographic technologies for 
computing and communications companies. Certicom 's core technology is the 

Certicom Elliptic Curve Engine (CE)2 -- a stronger, faster, smaller 
engine that performs public - key encyrption and digital signatures 
required for advanced data security. (CE)2 is available for software... 

...headquarters are located in Mississauga, Ontario, Canada, with sales and 
marketing operations in San Mateo, CA , and regional offices in 
Washington, D.C. and New York. Certicom shares are quoted on. . . 
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Motorola and Certicom demonstrate elliptic curve digital signatures on 

smart card without crypto coprocessor; Fast, low cost authentication now 

available . 

Business Wire, p05200402 
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... 28 billion. 

Certicom is a leading provider of cryptographic technoloaies to 
computing and communications companies. Certicom 's core t'ichnology is the 

Certicom Elliptic Curve Engine (CE) 2 -- a stronger, f.^stor, smaller 
engine which performs public - key encryption and digital signatures 
required for advanced data security. (CE) 2 is available for software... 

...headquarters are located in Mississauga, Ontario, Canada, with sales and 
marketing operations in San Mateo, CA , and regional offices in 
Washington, D.C. and New York. Certicom shares are quoted on... 
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... 300 employees . 

Certicom is a leading provider of cryptographic technologies for 
computing and communications companies. Certicom 's core technology is the 

Certicom Elliptic Curve Engine (CE) 2 a stronger, faster, smaller 
engine which performs public - key encryption and digital signatures 
required for advanced data security. {CE)2 is available for software... 

. . .headquarters are located in Mississauga, Ontario, Canada, with sales and 
marketing operations in San Mateo, CA , and regional offices in 
Washington, D.C. and New York. Certicom shares are quoted on... 
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. . . Certicom and Diversinet to Deliver Security for E-Commerce 

Certicom Corp. (Mississauga , Ontario, www, certicom. ca ) and 
Diversinet Corp. (Toronto, www.dvnet.com) announced that the companies have 
entered a licensing agreement under which Certicom will provide Diversinet 
with advanced data security technologies, based on Certicom 's Elliptic 
Curve Cryptography (ECC) . Diversinet will incorporate ECC into its own 
public - key infrastructure technology product line to provide businesses 
with security solutions for enterprise networking. 
Half of . . . 
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...ABSTRACT: CA outsourcing services. Building an in-house CA server 
requires expertise in networking architecture and public key 
encryption . CA issues digital certificates to identify users. The 
certificates are attached to files, E-mail or... 
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SSL protocol transparently. 
SSL depends on several cryptographic technologies. RSA Data 
Security's {Redwood City, CA ) public key encryption is used for the 
exchange of the session key and client-server authentication. Various 
cryptographic. . . 

19970500 



16/3, K/3 (Item 3 from file: 275) 

DIALOG (R) File 275:Gale Group Computer DB(TM) 
(c) 2002 The Gale Group. All rts. reserv. 

01666186 SUPPLIER NUMBER: 15055902 (USE FORMAT 7 OR 9 FOR FULL TEXT) 
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. . . the signature . 

The PowerTalk digital signature is based on RSA Data Security's 
(Redwood City, CA ) public - key cryptosystem algorithms. To get your 
digital signer (a data tool for creating the signature) , you go. . . 
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... seamless integration of the Cyber-SIGN (R) handwritten signature 

biometric authentication technology with the Entrust public - key 
certification authority , encryption and digital signature capability. 
The tightly coupled combination of the Cyber-SIGN biometrics and the 
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...parties may act as TTPs for specific functions, the most obvious example 
here being the certification authority for public encryption keys 
, This function is defined under the CCITT recommendations for directory 
services X.509. This TTP . . . 
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... and SPYRUS ' technology is a set of hardware and software components 

for generating the root CA 's private encryption key , which will be 
split into fragments that are each contained on a separate hardware device 
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... secure links between a server and mobile workers on the road. 

Cylink has incorporated a public key cryptography certification 
authority scheme into this system that allows users to register once in a 



central server, and. . . 
19950717 



16/3, K/8 (Item 2 from file: 148) 

DIALOG (R) File 148:Gale Group Trade & Industry DB 
(c)2002 The Gale Group. All rts . reserv. 

08200751 SUPPLIER NUMBER: 17609781 (USE FORMAT 7 OR 9 FOR FULL TEXT) 
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... not only contains the user's public key, but also the authenticated 

identity of the OA . 

Public key cryptosystems can also be used to provide an 
authentication service called "digital signature." Digital signatures 
permit . . . 
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order to issue digital certificates to servers and users within 
their intranet. CAs broadcast their public key and Distinguished Name. 
People add them as trusted root key to Web servers and browsers. This means 
your server will trust anyone who has a certificate from that CA . There 
are several common CAs in the marketplace. Servers and browsers are 
shipped with several default trusted root... 
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Digital certificates are the key behind electronic commerce. (public key 
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bona fide . 

However, for this procedure to work Internet users must have the 
details, including public keys , of leading certification authorities 
stored on their PCs. Browsers such as Microsoft's Internet Explorer provide 
the mechanism for this as they come with the digital certificates of many 
commercial certification authorities pre-installed, including the 
public keys . 

There are some questionable issues, such as the fact that you have to 
trust your . . . 
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... the user's certificate. On the flip side, this means everyone must 

trust the root CA . Many people would prefer to pick the CA they trust 
the most and validate others via... 

...makes the root CA a very tempting target for attackers. If the root CA's 
private key is compromised, then an attacker can generate false 
certificates that look authentic. This organization is... 
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... is, what the process for revoking certificates is, and so forth. 

Major players in the CA business 
Many companies are beginning to provide services and/or products 
related to digital certificates. On the... 

...the product side, Entrust Technologies offers a full set of products in 
the area of Public Key Infrastructure (PKI) and digital certificates. 
Other noteworthy vendors are the U.S. Post Office, General... 
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certificates verify to both parties in a transaction that the 
holder of a public or private key is the person or organization they 
claim to be. The key user's identity is attested to by a trusted third 
party, the Certification Authority . 

Many vendors are jumping into the new industry of certification 
technology, including GTE with its CyberTrust . . . 

19970600 
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Protecting your data with cryptography. (Technology Information) 
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ISSN: 0742-3136 LANGUAGE: English RECORD TYPE: Fulltext; Abstract 

WORD COUNT: 4 013 LINE COUNT: 0032 9 

... in several commercial products. 

Over the years, disputes have arisen over licenses and patents for 
public - key cryptosystems . To address some of these issues, several 



companies formed a consortium known as the Public Key Partners (PKP; 
Sunnvale, CA ) . This group now holds the patents and exclusive licensing 
rights to all public - key cryptosystems on behalf of MIT, Stanford 
University RSA Data Security, and others. (9) 
The mathematical... 

19961100 
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New tools for collaboration emerge in the public network, (groupware 

applications) (includes related article on Internet groupware security) 

(Company Business and Marketing) (Cover Story) 

Cummings, Joanne 

Telecommunications, v29, nl2, p25(3) 
Dec, 1995 

DOCUMENT TYPE: Cover Story ISSN: 0278-4831 LANGUAGE: English 

RECORD TYPE: Fulltext; Abstract 

WORD COUNT: 2262 LINE COUNT: 00178 

nobody's really interesed in the Internet as an infrastructure," 
she says. CommerceNet currently runs two certification authorities 
that issue public key certificates to its members, which enables them 
to experiment with the security technology. The group... 
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CitX Through Baltimore Technologies to Build Secure Certification Authority 
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PR Newswire, p3453 
Sept 27, 1999 

Language: English Record Type: Fulltext 
Document Type: Newswire; Trade 
Word Count : 846 

and services for a wide range of e-Commerce and enterprise 
applications. Its products include Public Key Infrastructure (PKI) 
systems, cryptographic toolkits, security applications and hardware 
cryptographic devices. Baltimore UniCERT is a modular, scalable, 
multipurpose Certificate Authority ( CA ) which issues and manages digital 
certificates for a wide range of applications including e-mail... 
19990927 
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Digital Signature Trust Company Validates Concept of Industry-wide 
Certificate Authority in Securities Industry Pilot. 

PR Newswire, p6754 
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root CA for the pilot. As a part of ABAecom's offer, DST provided 
the public key infrastructure (PKI) behind the root CA for SIRCA. DST 



also collaborated with the National Association. . . 

...signing process with the respective PKI technologies used by the firms. 
Additionally, DST provided the CA operation for two of the 
participating firms. 

"As our world becomes increasingly electronic, the necessity to 
facilitate secure. . . 
19990119 
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Language: English Record Type: Fulltext 
Document Type: Newswire; Trade 
Word Count: 896 

RSA Data Security Conference -- Entrust (R) Technologies Inc. 
(Nasdaq: ENTU) , the global leader in managed public - key infrastructures 
(PKI) , today announced that its open development toolkits are now available 
for download from. . . 

...in the PKI industry. Entrust Technologies is providing toolkits for 
building applications that work with multiple PKI and Certification 
Authority (CA) products or services from vendors such as Entrust, 
Baltimore Technologies, Microsoft, Netscape, Verisign and... 
19990118 
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Entrust Technologies* Announces Solution for Secure Internet Banking and 
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Business Wire, pl0061271 
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Language: English Record Type: Fulltext 
Document Type: Newswire; Trade 
Word Count: 7 52 

... of its Scotia OnLine service and has quickly become a leader in the 

issuance of public - key certificates from its two Entrust-based 
Certification Authorities . 

Entrust/Direct is based on sound and proven cryptography, and allows 
customer to control their. . . 
19971006 
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TIS Ships "Total Solution" For User Controlled Encryption Key Recovery. 

Business Wire, p7251232 
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Document Type: Newswire; Trade 
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both unnecessary and ill-advised to link use of key recovery with a 



government -mandated public key infrastructure for electronic commerce. 
For this reason, TIS does not support provisions in proposed U.S. 
legislation that would force top-down linkages between key recovery and 
issuance of public - key certificates by "Government -approved" 
certification authorities . 

"Combining two complex and fast moving sets of technologies like 
key recovery and public - key infrastructures creates unnecessary 
complications and delays for users. Forcing such a link is a bad... 

...means users can choose and change which forms of key management 
and which types of public - key certificates they want to use." 
RECOVERKEY COMPONENTS 

The RecoverKey Key Recovery Center (KRC) provides for... 
19970725 
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Language: English Record Type: Fulltext 
Document Type: Newswire; Trade 
Word Count: 756 

transactions using the smart card. In the future, the 
personalization system is designed to support multiple certification 
authorities and smart cards. "Over the next few years, we believe that 
enterprises across the globe will be deploying public key 
infrastructures to support a wide variety of on-line activities," according 
to John Doyle, vice. . . 
19980429 
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... a trusted third party between senders and recipients of electronic 

correspondence, ensuring the identity of public key owners. In 
addition, individuals misrepresenting themselves to the USPS is a criminal 
activity for which. . . 

...be prosecuted. There's also a psychological benefit to using the Postal 
Service as the CA . Many consumers will believe that if the Postal 
Service says it's okay to do transactions... 
19970301 
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Language: English Record Type: Fulltext 
Document Type: Magazine/ Journal ; Trade 
Word Count: 14 3 

(USE FORMAT 7 FOR FULLTEXT) 
TEXT: 

. . .unable to decide a new deadline, six major computer vendors are 
preparing to endorse a public - key encryption system developed by RSA 
Data Security Inc. (Redwood City, CA ). The group includes Novell, Inc., 
Lotus, and DEC, which have already signed licenses with RSA. Sun 
Microsystems . . . 
19910501 
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Knock/ knock ... who's there? (public key encryption) (Technology 
Information) 

Rothman, Mike 
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June, 1999 

Language: English Record Type: Fulltext Abstract 
Document Type: Magazine/ Journal ; Trade 
Word Count: 1442 

... in a secure business transaction 

1 A trusted third party known as a certificate authority ( CA ) 
issues two keys: a private key to an individual and a public key 
validated by the CA accessible to the general public. The CA can be 
internal to . . . 
19990601 
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Document Type: Magazine/ Journal ; Trade 
Word Count : 763 

signed the certificate requests coming from the participating firms 
and demonstrated interoperability among the various public key 
infrastructure vendors. DST was also the CA servicer for two of the 
brokerages and provided the registration of certificates in collaboration 
with the National Association. . . 
19990121 
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Document Type: Magazine/ Journal ; Trade 
Word Count: 424 9 



this writing, Axent does not offer a hardware-assisted encryption 

product . 

Network Associates (Santa Clara, CA ) acquired several security 
vendors in 1998, including Trusted Information Systems, which produces the 
Gauntlet Firewall. The Gauntlet... 

...VPN comes with its own certificate authority, letting an organization 
generate and verify X.509 public key certificates. 

Somewhat surprisingly for a security product, Gauntlet Global VPN 
runs on Windows 95. The... 
19980801 
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McClure, Stuart 
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Document Type: Magazine/ Journal ; Trade 
Word Count: 22 7 9 

Directory Access Protocol (LDAP) responds to requests to deliver 
the stored public key certificates. 

The CA generates two separate pairs of public and private keys 
for each user or server. One pair is used for encrypting and decrypting 
information, and. . . 

...this common problem: nonrepudiation , Nonrepudiation is the electronic 
equivalent of a signed log. Because the CA maintains two key pairs, the 
recipient of a digital signature, which was created with the sender's 
private key , can compare it to the signature generated by the receiver 
with the sender's public key . Thus, the recipient can confirm that the 
encrypted stream or file was actually made by. . . 
19980914 
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ABSTRACT : 

. . . CommerceNet executive director Cathy Medlich. The Internet goes almost 
everywhere at little cost. CommerceNet runs two certification 
authorities that issue public key certificates to members so that they 
can experiment with security technology. It is running several... 
19951201 
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Houser, Walter R. 
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March 17, 1997 
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RECORD TYPE: Full text; Abstract 

WORD COUNT: 811 LINE COUNT: 0006 8 

... CommerceNet of Palo Alto, Calif. 

An enterprising digital notary may need to sign up with several 
certifying authorities because their solutions and methods may be 
incompatible, based on differing public / private - key algorithms. 

One gets a secret private key and a public key to be widely 
distributed . . . 
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Security Goes Wireless 
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RECORD TYPE: Fulltext 

SECTION HEADING: NEWS & ANALYSIS 

WORD COUNT: 371 

signatures legally binding. The new law is expected to stimulate 
ail e-commerce, including wireless. 

Certicom launched the first Certificate Authority ( OA ) , dubbed 
MobileTrust, that will issue digital certificates to users of handheld and 
wireless devices supporting Elliptic Curve Cryptography encryption. 

ECC is an encryption method suited for resource-constrained devices 
such as cellular... 
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TEXT: 

... certain public-key communities, primarily around RSA and PGP 

algorithms, will spur interest in the elliptic curve class of 
public-key crypto algorithms. The company has launched an Elliptic 
Curve Cryptosystem challenge { www. certicom . ca ) , and is offering 
prizes for determining an ECC private key based on knowledge of the. 
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THE BUSINESS OF DIGITAL SIGNATURES 

Electronic Commerce News 

October 2, 2000 VOL: 5 ISSUE: 39 DOCUMENT TYPE: NEWSLETTER 

PUBLISHER: PHILLIPS BUSINESS INFORMATION 

LANGUAGE: ENGLISH WORD COUNT: 798 RECORD TYPE: FULLTEXT 

(c) PHILLIPS PUBLISHING INTERNATIONAL All Rts. Reserv. 

TEXT: 

An Interview With Certicom Vice President Of Field Operations Richard 
Depew 

Certicom [CERT], a Hayward, Calif. -based encryption technology firm, 
opened a certificate authority service center Oct... 

...into effect (see 

ECN 9/25/00). In this special two-part series, Richard Depew, Certicom 's 



vice 

president of field operations, tells ECN how the business of authentication 
relates to . . . 
. . .world 

and, as such, we do have to be in a large range of industries. Certicom 
has 

taken the approach of focusing on the markets that are most applicable for 
our . . . 

. . .and are announcing a 

wireless extension to their product strategy, which brings them back to 
Certicom . 

ECN: What role do your partnerships with companies like AT&T [T] , 
Motorola [MOT] , and. . . 

. . .OEM [original equipment manufacturer] 

[clients] are those who will need certificates as part of their Certicom 
-enabled 

security solution. We do not have to rely on a less vertically integrated 
security. . . 

...of differences. The device is typically much 

more constrained than a desktop or server. When Certicom launched SSL 
[Secure 

Socket Layer] Plus for Embedded Systems, we built the product from the... 

...limited processing power, the algorithms have 

to be much more efficient. This is why ECC [ elliptic curve 

cryptosystems] has 

been successful in the wireless environment and is becoming important in 
smart 

card... world as there are many more points of attack compared to the 
wireline 

world. With Certicom mutual authentication, using both server and client 
certificates and ECDSA [ Elliptic Curve Digital Signature Algorithm] for 
digital 

signatures (in accordance with the new E-Sign law) ... we... 
. . .devices . 

ECN: What companies do you view as your prime competition? Where do you 
view Certicom vis-a-vis these competitors? 

Depew: Nobody has the same comprehensive solution set that we do, so it 
depends on the product. Certicom will be the first company to offer ECC 
certificates for the wireless environment for both servers and clients. 
Other 

companies in the CA [certificate authority] business, whether product or 
services, include Verisign Inc. [VRSG] , Baltimore Technologies pic [BALT. . . 

...to these companies. In. the crypto [ography] space, RSA 

Security Inc. [RSAS] continues to be Certicom 's biggest competitor. 

Certicom will soon offer RSA technology in its products in the United 
States, due to the patent expiring, rounding out our offering. Certicom 
is 

positioned versus RSA based on our ownership of the ECC marketplace and 
expertise in. . . 

. . .Baltimore Technologies pic] we do not run into those kits in the field 
very 

often. Certicom entered the handheld VPN [virtual private network] space 
because 

there was a strong market need, and no competitors providing a solution 
that can 

interoperate with multiple gateways. 

(For Richard Depew, Certicom , Lorraine Kauffman, 510/780-5417.) 
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(c) BRP PUBLICATIONS All Rts. Reserv. 

TEXT: 

...Officials with Certicom Corp., developer of the elliptic curve 
technology, said ECC and smart cards can provide greater speed, security 
performance improvements, cost savings... 

...to enable an interoperable, efficient system from the smart card, to the 
server, to the CA [certificate authority] underscores the industry's 
enthusiasm for elliptic curve technology and its demand for increased 
efficiency for online financial transactions," said Philip Deck, president 
and chief executive officer for Certicom . 
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Items of Interest 
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TEXT: 

...Toronto-based Certicom Corp. has opened an office in California to 
better position the company to license its elliptic curve cryptosystem 
(ECC) public key technology to original equipment manufacturers in the 
United States. The office... 

...strategic partnerships, combined with key technical knowledge of the 
security market, is sure to broaden Certicom 's relationships in the 
United States," said Gary Hughes, president and chief executive officer of 
Certicom . The company also announced the appointment of Bruce Maclnnis to 
the post of chief financial officer. Certicom : Contact Jennifer 
Vancini, 200 Matheson Blvd. West, Suite 103, Mississauga , Ontario L5R 3L7, 
Canada. Phone: +1 905-507-4220. E-mail: jvancini® certicom . ca . 



9 



17/3, K/1 (Item 1 from file: 15) 

DIALOG (R) File 15 : AB I /Inform (R) 

(c) 2002 ProQuest Inf o&Learning . All rts. reserv. 

02277107 86921891 
Making e-mail secure 

Shirley Daniels 

Work Study v46n6 PP: 207-214 1997 
ISSN: 0043-8022 JRNL CODE: WST 
WORD COUNT: 53 52 

. . .TEXT: be made with a standard password/phrase (which may be null) and 
that keyring serially encrypted in the public keys of the 

organization 's certification keys. Should the user lose access to their 
private key(s), they would then be... 
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...TEXT: they fall short. They are too abstract. They have no flourish, no 
flair, no style. 

Public key cryptography , when supported by a certification 

authority , is known as public key infrastructure (PKI) . The 

best-known provider of PKI is Verisign, http://www.verisign.com. Don... 
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ISSN: 0887-7661 JRNL CODE: NWW 
WORD COUNT: 63 7 

...TEXT: message digest," a value that describes the contents of the 
fields. This digest is then encrypted with the certification authority 
's private key to create the signature value. 

That's what X.509 is - a specification of the... 



17/3, K/4 (Item 4 from file: 15) 

DIALOG (R) File 15 : ABI/Inf orm (R) 

(c) 2002 ProQuest Inf o&Learning . All rts. reserv. 
01685350 03-36340 

Public-key certificates protect corporate jewels 

Stallings, William 

Network World vl5n33 PP: 29 Aug 17, 1998 
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...TEXT: all practical purposes, two different certificates will yield two 
different hash codes. 

Next the CA encrypts the hash code with the CA 's private key to 



produce the signature. A common public-key algorithm for this purpose comes 
from RSA. . . 
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Digital signatures and their use in treasury 
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...TEXT: the CA's own certificates, information encrypted with their 
private key (which the viewer would decrypt with the CA 's public key 
to authenticate the CA ), date and time stamps, disclaimers, and other 
material. The receiver of the message that includes... 
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...ABSTRACT: and normal requests and handle the initial negotiation phase. 
Web security schemes that depend on public - key cryptography require a 
Certification Authority to vouch for the credentials and provide the 

public keys needed for secure Web servers... 

...TEXT: joint proposal by MasterCard and Visa. A Central Aumoriy 

Web security schemes that depend on public - key cryptography require a 
Certification Authority ( CA ) to vouch for the credentials 

(authenticate) and provide the public keys needed for secure Web. . . 



17/3, K/7 (Item 7 from file: 15) 

DIALOG(R) File 15 : ABI/ Inform (R) 

(c) 2002 ProQuest Inf o&Learning . All rts. reserv. 
01380695 00-31682 

Keeping secrets: Data security in the e-mail 
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...TEXT: Rivest, Adi Shamir, and Leonard Adleman) , will be used in 
conjunction with 'trusted third party' certification authorities . 

Public key encryption uses asymmetric keys. One key is used to 

encrypt a message, and a different key... 
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...TEXT: secure links between a server and mobile workers on the road. 
Cylink has incorporated a public key cryptography certification 

authority scheme into this system that allows users to register once in a 
central server, and. . . 
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...ABSTRACT: Spyglass Inc., discusses commerce and security on the 
World-Wide Web. Parker thinks that a certification authority in charge 
of public - key encryption is the solution to offering secure commerce 
on the World-Wide Web. 

...TEXT: What will enable secure commerce on the World-Wide Web? 

A You must have a certification authority if you are using a public - 
key encryption . The certification authority provides a way for a 

third party to establish that the buyer and the seller... 



17/3, K/10 (Item 10 from file: 15) 

DIALOG(R) File 15 : ABI/ Inform (R) 

(c) 2002 ProQuest Inf o&Learning . All rts. reserv. 
00649940 92-64880 

COSINE Sub-Project PS: Security Services 
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. . .ABSTRACT: limited but attainable goals of secure electronic mail and 
secure remote access, supported by a certification authority and 
public key cryptographic functions, are intended to demonstrate that 
these functions can be provided in a relatively short... 
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CHRYSALIS: Chrysalis - ITS Announces Availability of Entrust-Ready Luna CA3 
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...including Solaris and Windows NT. Luna CA3 toolkits are available an 

d 

include the PKCS 11 public key cryptography standard. Luna CA , with 
FIPS 140-1 Level 2 configuration, is also Entrust-Ready and pricing 
starts at . . . 
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. . .dedicated to ensuring the privacy and 
authenticity of data communications enterprise-wide. Its award-winning 
public - key infrastructure technology combines certification 

authority , 

encryption and digital signature capabilities with fully automated key 
management. Widely used by financial institutions, government... 
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...single sign-on, Virtual Private Networks, 
Internet and extranet security and Raptor firewalls; 

Entrust Technologies -- public - key infrastructure technology that 
combines certification authority , encryption and 
digital -signature capabilities with fully automated key 
management ; 

Internet Security Systems, Inc. -- adaptive network... 
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...dedicated to ensuring the privacy and 
authenticity of data communications enterprise-wide. Its 
award-winning public - key infrastructure technology combines 
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...dedicated to ensuring the privacy and 
authenticity of data communications enterprise-wide. Its award-winning 
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encryption and digital signature capabilities with fully automated key 
management. Used by financial institutions, government agencies... 
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... a hash total) is also computed, based on this information. 

Finally, this hash total is encrypted using the CA 's private key . 
By decrypting the hash total, using the CA's public key and comparing it 
to the other. . . 
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for Cryptography API) , this feature will support all the most 
common encryption methods, including Data Encryption Standard and 
public - key encryption . It also supports certification authority , 
which means that it can handle digital signatures and transactions where 
one party is validated. . . 
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LANGUAGE: ENGLISH WORD COUNT: 2413 RECORD TYPE: FULLTEXT 

(c) BRP PUBLICATIONS All Rts. Reserv. 

TEXT: 

. . .Where governments have determined that digital signatures based on 
public key cryptography require certification authorities to 

support their functions on open networks, it is often asked whether 
certification authorities should. . . 

1998 



17/3, K/20 (Item 2 from file: 696) 

DIALOG (R) File 696:DIALOG Telecom. Newsletters 
(c) 2002 The Dialog Corp. All rts. reserv. 

00547665 
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,..s public key. For a third party to confirm someone's identity, it takes 
the certifying authority 's public key , decrypts the 
authenticating message and knows that someone (the certifying authority) 
has taken responsibility for assuring. . . 
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...or Microsoft Exchange and the Business Transaction Network. The company 

also is looking at public/ private encryption key issues, and may act 
as certifying authority or as administrator for other companies' CA 
requirements . . . 
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...or Microsoft Exchange and the Business Transaction Network. The company 
also is looking at public/ private encryption key issues, and may act 
as certifying authority or as administrator for other companies' 
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BYLINE: 
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... focusing on home .and small -business markets. ""Over the next 6 to 12 
months, the certification authorities and public key encryption 
will be the biggest stumbling blocks." 
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dedicated to ensuring the privacy and authenticity of data 
communications enterprise-wide. Its award-winning public - key 
infrastructure technology combines certification authority , 

encryption and digital signature capabilities with fully automated key 
management. Used by financial institutions, government agencies... 
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dedicated to ensuring the privacy and authenticity of data 
communications enterprise-wide. Its award-winning public - key 
infrastructure technology combines certification authority , 

encryption and digital signature capabilities with fully automated key 
management. Used by financial institutions, government agencies... 
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... avoid fraud and impersonation. ARCANVS is a Latin word which means 

something secretive and trustworthy. Cryptography involves secret , 

private keys . A Certification Authority which manages Certificates 

with integrity as a trusted third party is a publicly trustworthy service 
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The role of cryptography in network security. 
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TEXT: 

... not only contains the user's public key, but also the authenticated 

identity of the CA . 

Public key cryptosystems can also be used to provide an 
authentication service called "digital signature." Digital signatures 
permit . . . 
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ABSTRACT: 

...und produktunabhaengig und plattf ormuebergreif end eine einheitliche 
Verf ahrensweise zu manif estieren . S/MIME basiert auf auf CMS ( 
Cryptographic Message Syntax) , die im PKCS ( Public Key Cryptography 
Standard) definiert ist. Eine CA (Certification Authority) bestaetigt mi 
ihrer digitalen Signatur die Authentizi taet von Benutzerschluesseln . 
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Digital signature management 
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WORD COUNT: 5 307 

...TEXT: e-commerce . The project is currently in the implementation phase. 
In the first phase a two -level OA hierarchy will exist: a top-level CA 
and one end-user CA. This structure will... 

... sufficient to ensure interoperability in this area. An IETF working 
group (PKIX, Internet X.509 Public Key Infrastructure) was established 
to specify the missing parts and in this way solve the interoperability... 
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Securing E-commerce sites 

Buchner, Mark 

Midrange Systems vl2n3 PP : 28 Mar 1, 1999 
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. . .TEXT: order to issue digital certificates to servers and users within 
their intranet. CAs broadcast their public key and Distinguished Name. 
People add them as trusted root key to Web servers and browsers. This means 
your server will trust anyone who has a certificate from that CA . There 
are several common CAs in the marketplace. Servers and browsers are 
shipped with several default trusted root... 
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PKI tames network security 

McClure, Stuart 
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. . .TEXT: Directory Access Protocol (LDAP) responds to requests to deliver 
the stored public key certificates. 

The CA generates two separate pairs of public and private keys for 
each user or server. One pair is used for encrypting and decrypting 
information, and. . . 

. . . this common problem: nonrepudiat ion . Nonrepudiation is the electronic 
equivalent of a signed log. Because the CA maintains two key pairs, the 
recipient of a digital signature, which was created with the sender's 
private key , can compare it to the signature generated by the receiver 
with the sender's public key . Thus, the recipient can confirm that the 
encrypted stream or file was actually made by... 
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. . .TEXT: rental of all temp workers in the hands of a single vendor led to 
the second key el ement of the new employer-vendor relationship: 

on-premises contracts, in which account managers... 

... of contracts in the industry today. "Staffing Industry Report," a 
newsletter based in Los Altos, CA , estimated as many as 3,000 
onpremises contracts were in place at the end of 1996. For some... 



21/3, K/5 (Item 1 from file: 810) 

DIALOG (R) File 810:Business Wire 

(c) 1999 Business Wire . All rts. reserv. 

0754277 BW1271 

ENTRUST TECHNOLOGIES: Entrust Technologies' Announces Solution for Secure 
Internet Banking and Brokerage 
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. . .of its Scotia OnLine service and has quickly become a leader 
in the issuance of public - key certificates from its two Entrust -based 
Certification Authorities . 

Entrust/Direct is based on sound. and proven cryptography, and 
allows customer to control their. . . 
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...for this technology is "public-key cryptography." During 
the past two months, Scotiabank has implemented two " Public - key 

Certification Authorities , " enabling the bank to create and provide 
public-key certificates to users such as bank. . . 
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888) VPNET-88, (408) 445-6600. www.vpnet.com 
Key Management System 
Xcert Software Sentry CA 

There are many places to put your public key certificates, but 
Xcert Software's Sentry CA, our Well -Connected Award winner in Enterprise 
Security. . . 

...Online Certificate Status Protocol), which may break down the barriers 
to a widely deployed, multivendor public key infrastructure. 

Secure Parts Sentry CA has three components: an SSL (Secure Sockets 
Layer) -enabled Web. . . 
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. . .that 

their counterparts 'aay be impostors, unauthorized agents or e-commerce 
Web sites being spc-^fed. 

Public key inf rc.structure (PKI) technology goes a long way 
toward providing identity certainty. Through the power of... 

. . . Kristin 

Kupres, Identrus ' chief operating and technology officer. 
"Real-time validation capability within and across public key 
infrastructures is critical for businesses that intend to engage in 
high-value e-business transactions ... processing loads, simplify end-user 
searches, and 

eliminate the need to configure multiple clients to multiple 

certification authorities . 
Under the OCSP protocol, relying parties send specific 
information about the certificates they receive to. . . 
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, . .As part of NACHA' s Internet Council CA Interoperability Pilot, 
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certificate systems interoperable to allows banks, merchants... 

...Technologies. "The very nature of this pilot sends a clear message that 
CA and PKI [ public key infrastructure] technology vendors are willing 
and able to collaborate in order to address interoperability issues 
associated with using public - key certificates... 
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. . .One major aspect of the project involves creating the public key 
infrastructure that will support this kind of verification, and the USPS 
has been developing a... that also want to act as certifying authorities - 
Verisign Inc. and GTE Corp., to name two . As certifying authority , 
the USPS would issue digital IDs to users and verify that these digital 
stamps are . . . 
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One major aspect of the project involves creating the public key 
infrastructure that will support this kind of verification, and the USPS 
has been developing a. . . 

...that also want to act as certifying authorities - Verisign Inc. and GTE 
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...root CA for the pilot. As a part of ABAecom's offer, DST provided the 
public key infrastructure (PKI) behind the root CA for SIRCA. DST also 
collaborated with the National Association. . . 

... signing process with the respective PKI technologies used by the firms. 
Additionally, DST provided the CA operation for two of the 
participating firms. 

"As our world becomes increasingly electronic, the necessity to 
facilitate secure. . . 
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TEXT: 

IN A SECURE BUSINESS TRANSACTION 
1 A trusted third party known as a certificate authority ( CA ) issues two 

keys: a private key to an individual and a public key validated by 
the CA accessible to the general public. The CA can be internal to... 

1999 
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Set Items Description 

51 64 AU= (CORDERY R? OR CORDERY, R?) 

52 14 CERTICOM 

53 4617 ELLIPTIC (2N)CURV? OR HYPERELLIPTIC { 2N) CURV? 

54 2534 (PRIVAT? OR PUBLIC70R SECRET? OR FIRST OR SECOND? OR PRIMA- 

R?) (IW) KEY? ? 

55 1177994 HCC OR AVC OR CODIF? OR DECOD? OR UNENCOD? OR DECRYPT? OR - 

UNENCRYPT? OR UNCRYPT? OR CIPHER? OR CYPHER? OR ENCOD? OR COD- 
E? ? OR CODING? OR ENCOD? OR ENCIPHER? OR ENCYPHER? OR UNCOD? 
OR DECIPHER? OR DECYPHER? OR UNENCIPHER? OR UNENCYPHER? 

56 114235 UMCIPHER? OR UNCYPHER? OR CRYPTO? OR ENCRYPT? 

57 1122170 CERTIFYING? OR CERTIFY OR CERTIFICATION? OR CERTIFIES OR C- 

ONFIRM? OR VERIFY? OR ATTEST? 

58 6556343 STATION? OR AUTHORIT? OR POWER? OR AGENC? OR ORGANI? OR BO- 

ARD? 

59 16006517 MULTI? OR PLURAL? OR MANY OR SEVERAL? OR NUMER? OR CLUSTER? 

OR GROUP? OR MULTIPL? OR PLENTY? OR CONSIDERABLE? OR TWO OR - 
DUAL OR DOUBL? 

510 4 82 AND S3 

511 4 RD (unique items) 

512 23 S4 AND (S5 OR S6) AND (S7(3N)S8) 

513 19 RD (unique items) 

514 12 S13 AND PY<=1999 

515 32 S4 AND S9 AND S7 AND S8 

516 26 RD (unique items) 

517 19 S16 NOT S12 

518 12 817 AND PY<=1999 

519 0 81 AND 84 AND (85 OR S6) 

820 12 84 AND (S5 OR 86) AND S7 AND S8 AND S9 

821 5 820 NOT (818 OR 814 OR 810) 
S22 5 RD (unique items) 

823 0 822 AND PY<=1999 
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11/3, K/1 (Item 1 from file: 233) 

DIALOG (R) File 233: Internet & Personal Comp . Abs . 
(c) 2002 Info. Today Inc. All rts. reserv. 

00660370 02CW04 -Oil 

FAA adopts wireless encryption for safety 

Verton, Dan 

Computerworld , April 1, 2002 , v36 nl4 plO, 1 Page{s) 
ISSN: 0010-4841 
Company Name : Certicom 

Company Name : Certicom 

. . . licensing wireless encryption technology. Explains that FAA will 
license public key infrastructure (PKI) technology from Certicom Corp. of 
Hayward, CA. Mentions that the move comes as the FAA enters the 
implementation. . . 

... into the data link between ground controllers and pilots. Notes the ATN 
will rely on Certicom 's Elliptic Curve Cryptography, a standard for 
digital signature algorithms that offers more efficient use of bandwidth 
than. . . 

Identifiers : Certicom 



11/3, K/2 (Item 2 from file: 233) 

DIALOG (R) File 233: Internet & Personal Comp. Abs. 
(c) 2002 Info. Today Inc. All rts. reserv. 

00614782 OOCWll-301 

MicroStrategy, Aether to take data mining wireless 

Weiss, Todd R 

Computerworld , November 27, 2000 , v34 n48 p66, 1 Page(s) 
ISSN: 0010-4841 

Company Name: MicroStrategy; Aether Systems 

. . .any wireless network. Indicates that wireless security is provided by 
a mechanism based on the Elliptic Curve Cryptosystem developed by 
Certicom Corp. of Hayward, CA. Explains that AIM supports most operating 
systems and portable devices. Includes... 



11/3, K/3 (Item 3 from file: 233) 

DIALOG (R) File 233: Internet & Personal Comp. Abs. 
(c) 2002 Info. Today Inc. All rts. reserv. 

00602973 00IK05-015 

Pocket PC secured for e-biz 

Yasin, Rutrell 

InternetWeek , May 1, 2000 , n811 p31, 1 Page(s) 
ISSN: 0746-8121 

Company Name: TD Waterhouse; Microsoft 
Product Name : Microsoft Pocket PC 

... with traders. Enumerates the features of the rival Palm platform, 
such as use of the Elliptic Curve Cryptography technol from Certicom 
Corp., Message Integrity Check which detects transmission errors, and 
network authentication. Includes a photo. (MEM) 



11/3, K/4 (Item 1 from file: 99) 

DIALOG (R) File 99: Wilson Appl . Sci & Tech Abs 
(c) 2002 The HW Wilson Co. All rts. reserv. 

2442660 H.W. WILSON RECORD NUMBER: BAST98016290 
Encryption battle heats up 
Computer v. 31 (Jan. 1998) p. 22 

DOCUMENT TYPE: Feature Article ISSN: 0018-9162 

...ABSTRACT: of a strong, fast 128-bit encryption technology. Moreover, 



several companies have begun to deploy Certicom 's elliptic - curve 
cryptography, which uses fewer computations than S/MIME. 



14/3, K/1 (Item 1 from file: 238) 

DIALOG (R) File 238:Abs. in New Tech & Eng. 
(c) 2002 Cambridge Scient. Abstr. All rts. reserv. 

0319909 ANTE NUMBER: 83769 
Signing away the future 

AUTHOR (S) : Harrington, T. 

JOURNAL: Computing 11 Mar 1999 p. 53 -4, 56. 

PUBLICATION YEAR: 1999 

ISSN: 0144-3097 

BLDSC SHELF MARK: 3395.009 

LANGUAGE: English 

PUBLICATION YEAR: 199 9 

ABSTRACT: ...with regard to digital signatures for online transactions is 
examined. Problems in the UK with encryption , public/ private key 
cryptography , and certifying authorities (trusted third parties) 
are discussed, and compared to the situation in other European countries 
and. . . 
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DIALOG (R) File 8:Ei Compendex (R) 

(c) 2002 Engineering Info. Inc. All rts. reserv. 

04665354 E.I. No : EIP97043595398 
Title: Inferno security 

Author: Presotto, David Leo 
Corporate Source: Bell Labs 

Conference Title: Proceedings of the 1997 IEEE COMPCON Conference 
Conference Location: San Jose, CA, USA Conference Date: 
19970223-19970226 

E.I. Conference No.: 46226 

Source: Digest of Papers - COMPCON - IEEE Computer Society International 
Conference 1997. IEEE, Piscataway, NJ, USA, 97CB36028 . p 251-253 
Publication Year: 1997 
CODEN: DCSIDU 
Language: English 

...Abstract: optional: an application may use it or avoid it. Inferno 
provides strong mutual authentication, message encryption , message 
digesting, and digital signatures. Authentication and digital signatures 
are performed using public key cryptography . Public keys are certified by 
Inferno-based certifying authorities that sign the public keys with 
their own private key . (Author abstract) 7 Refs. 

Descriptors: Security of data; Computer operating systems; Cryptography 
; Algorithms; Data communication systems; Network protocols; Data 
processing 
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(c) 2002 Institution of Electrical Engineers. All rts. reserv. 

6498703 INSPEC Abstract Number: B2000-03 -6120D-084 , C2000 -03 -613 OS -044 

Title: On the life cycle of the certification authority key pair in 
EMV 96 

Author (s): Markantonakis , C; Rantos, K. 

Author Affiliation: Inf. Security Group, London Univ., Egham, UK 
Conference Title: EUROMEDIA '99 p. 125-30 
Editor(s): Hahn, W.; Walther-Klaus , E.; Knop, J. 
Publisher: SCS, San Diego, CA, USA 

Publication Date: 1999 Country of Publication: USA x+256 pp. 
ISBN: 1 56555 169 9 Material Identity Number: XX-2000 -00187 

Conference Title: EUROMEDIA' 99 
Conference Sponsor: Siemens AG 

Conference Date: 26-28 April 1999 Conference Location: Munich, Germany 
Language: English 



Subfile: B C 
Copyright 2000, lEE 



Title: On the life cycle of the certification authority key pair in 
EMV 96 

...Abstract: namely that there are no provisions for dealing with the 
compromise or revocation of the certification authority 's private 

key . We believe that in such a case the whole system would collapse. An 
attacker possessing... 

... by re-issuing the old cards and setting up the ICC terminals with the 
new certification authority (CA) public key. Our proposed solution aims 
to extend the system's life cycle, i... 

...Descriptors: public key cryptography 

...Identifiers: certification authority ; ... 

. . . private key ; 
1999 
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DIALOG (R) File 2 : INSPEC 

(c) 2002 Institution of Electrical Engineers. All rts. reserv. 

6496455 INSPEC Abstract Number: B2000-03-6120D-071, C2000-03 -1260C-049 
Title: A global key recovery system 
Author(s): Lein Harn; Hung-Yu Lin; Guang Gong 

Author Affiliation: Dept. of Comput . Networking, Missouri Univ., Kansas 
City, MO, USA 

Conference Title: Proceedings of 1999 International Workshop on 
Cryptographic Techniques and E-Commerce p. 81-5 
Editor (s): Blum, M.; Lee, C.H. 

Publisher: City Univ. Hong Kong, Kowloon, Hong Kong 

Publication Date: 1999 Country of Publicatic.i: Hong Kong x+290 pp. 
ISBN: 962 937 049 2 Material Identity Nurr^er: XX-1999-02077 

Conference Title: Proceedings of CrypTEC'9.V: International Workshop on 
Cryptographic Techniques and E-Commerce 

Conference Date: 5-8 July 1999 Conference Location: Hong Kong 
Language: English 
Subfile: B C 
Copyright 2000, lEE 

Abstract: Cryptographic technologies used today are either symmetric 
key or public key. Cryptographic keys have become vital parts in modern 
communications. Key recovery is a technology that allows the owner of 
encrypted data or a trusted third party to recover a lost or otherwise 
unavailable session key. Key recovery has emerged as a safe, practical 
method for recovering encrypted data. We propose a key recovery system 
that combines the functions of public-key certification and key recovery 
authorities This key recovery system recovers a user's private key 

that is used to generate digital signatures or to encrypt random session 
keys. This proposed system is easy to implement, scalable, has no single 
point . . . 

...Descriptors: public key cryptography 
...Identifiers: symmetric key cryptography ; ... 

. . .public key cryptography ; ... 

. . . encrypted data 
1999 
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6137991 INSPEC Abstract Number: B1999 -02 -6120D- 050 , C1999-02 -6130S-070 
Title: Key management unit CK-Guard 
Author (s) : Hosokawa, T. ; Miyauchi, H. ; Kimura, M. 



Author Affiliation: Data Commun. Div., NEC Corp., Japan 
Journal: NEC Technical Journal vol.51, no. 9 p. 146-9 
Publisher: NEC, 

Publication Date: Sept. 1998 Country of Publication: Japan 

CODEN: NECGEZ ISSN: 0285-4139 

SICI : 02 85-413 9(199809)51:9L. 14 6 : MUG; 1-P 

Material Identity Number: H719 - 1998 - 012 

Language: Japanese 

Subfile: B C 

Copyright 1999, lEE 

Abstract: Management of private keys is a crucial issue in systems 
which require high-level security, such as certification authorities 
based on the RSA public key cryptosystem . NEC has developed tamper 
resistant private key management equipment, CK-Guard. CK-Guard is 

accessed by software Secureware/ Private Key Module Manager on the 

server connected with the CK-Guard. The users can manage CK, . . 

. . .Descriptors: cryptography ; 

...Identifiers: private key management... 

. . . certification authorities ; ... 



. . .RSA public key cryptosystem ; ... 

...tamper resistant private key management... 

. . . Private Key Module Manager 
1998 



14/3, K/6 (Item 4 from file: 2) 

DIALOG (R) File 2 : INSPEC 
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5533606 INSPEC Abstract Number: C9705 -6130S-013 
Title: Legal signatures and proof in electronic commerce 

Author (s) : Wright, B. 

Conference Title: Proceedings of the Second USENIX Workshop on Electronic 
Commerce p. 67-75 

Publisher: USENIX Assoc, Berkeley, CA, USA 

Publication Date: 1996 Country of Publication: USA vi+314 pp. 
Material Identity Number: XX96-03462 

Conference Title: Proceedings of 2nd USENIX Workshop on Electronic 
Commerce 

Conference Sponsor: USENIX Assoc.; Univ. California Berkley 

Conference Date: 18-21 Nov. 1996 Conference Location: Oakland, CA, USA 

Language: English 

Subfile: C 

Copyright 1997, lEE 

...Abstract: of Utah (USA) has enacted a scheme for certifying a public 
key through a licensed certification authority . The Utah scheme 

concentrates risk in the private key . In contrast, the IRS (Internal 
Revenue Service) is using a biometric signature technology called PenOp... 

...Descriptors: public key cryptography ; 

...Identifiers: licensed certification authority ; ... 

. . . private key ; 
1996 



14/3, K/7 (Item 5 from file: 2) 

DIALOG (R) File 2 : INSPEC 
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4906923 INSPEC Abstract Number: B9505 -6120B-003 , C9505-6130S-003 

Title: Issues in using public-key cryptography in signing electronic 
documents 

Author (s): Wright, B. 



Journal: EDPACS vol.22, no . 9 p. 9-12 

Publication Date: March 1995 Country of Publication: USA 
CODEN: EDPCDF ISSN: 0736-6981 
Language : Eng 1 i s h 
Subfile: B C 
Copyright 1995, lEE 

Title: Issues in using public-key cryptography in signing electronic 
docuunents 

Abstract: Public-key cryptography was developed by A. Shamir (1978) as 
a means for authenticating electronic messages. Public-key cryptography 
is intended to be employed in marking computer data so that the integrity 
and origin . . . 

...proven. This article examines some of the issues associated with the use 
of public-key cryptography in signing or authenticating electronic 
documents. Using a public-key cryptography scheme seems to be an 
impressive way to achieve airtight legal proof of who agreed. . . 

... in electronic commerce. However, the implementation of this seemingly 
airtight scheme has four problems: (i) private keys are hard to manage; 
(ii) smart card technology costs something; (iii) standards are necessary; 
and (iv) public keys are hard to manage. When public-key cryptography 
employing a certification authority is used to sign a legal document, 
the parties to the transaction are seeking to. . . 

... a secure record. Depending on how they are implemented, the various 
forms of public key cryptography can perform some or all of the functions 
described in this article. This discussion of public-key cryptography 
does not refer to any particular commercial product or implementation of 
it. 

...Descriptors: public key cryptography ; 
Identifiers: public-key cryptography ; ... 

. . . private keys ; ... 

. . . certification authority ; 
1995 
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DIALOG (R) File 233: Internet & Personal Comp. Abs . 
(c) 2002 Info. Today Inc. All rts. reserv. 

00525091 99WI02-003 

E-commerce: digital signature technology 

Zhou, Tao 

Windows NT , February 1, 1999 , n42 p75-80, 5 Page(s) 
ISSN: 1083-138X 

Describes digital signature technology and its role in electronic 
commerce. Explains message hashing and encryption , how public and 
private keys work, and two public key trust models, direct and 

third-party. Discusses how the third-party model uses the Certificate 
Authority (CA) , a trustworthy organization that certifies public keys 
and publishes the Certificate Revocation List (CRL) . Examines the use of 
time stamping . . . 

1999 
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03634839 JICST ACCESSION NUMBER: 98A0601240 FILE SEGMENT: JICST-E 
Verification of public key certificates. 
SAKAKIBARA HIROYUKI (1); YOSHITAKE JUN (1) 
(1) Mitsubishi Electric Corp. 

Joho Shori Gakkai Kenkyu Hokoku, 1998 , VOL . 98 , NO . 54 (CSEC- 1) , PAGE. 53-58, 



FIG. 5, REF.4 
JOURNAL NUMBER: Z0031BAO ISSN NO: 0919-6072 

UNIVERSAL DECIMAL CLASSIFICATION: 681.3.02.001 681.3.02-759 
LANGUAGE: Japanese COUNTRY OF PUBLICATION: Japan 

DOCUMENT TYPE: Journal 
ARTICLE TYPE: Original paper 
MEDIA TYPE: Printed Publication 

, 1998 

ABSTRACT: Recently requirement of public key cryptosystem has been 

increased on the Internet communication. A "public key certificate" 
issued by a Certification Authority (CA) is needed for secure 
communication with public key cryptosysytem . A public key certificate 
is data structure which binds public key value to the public key owner 
digitally signed with the CA's private key . A public key of an 
entity should be safely obtained from the certificate verified through 

...DESCRIPTORS: public key cryptography ; 
...BROADER DESCRIPTORS: cryptograun ; 
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(c) 2002 NTIS, Intl Cpyrght All Rights Res. All rts . reserv. 

1935288 NTIS Accession Number: DE96000777 

Public/ private key certification authority and key distribution. 
Draft 

Long, J. P. ; Christensen, M. J. ; Sturtevant, A. P. ; Johnston, W. E. 

Sandia National Labs., Albuquerque, NM. 

Corp, Source Codes: 068123000; 9511100 

Sponsor: Department of Energy, Washington, DC. 

Report No.: SAND- 95 -214 7C -DRAFT; CONF- 950 9224 - 1 -DRAFT 

25 Sep 95 25p 

Languages: English Document Type: Conference proceeding 
Journal Announcement: GRAI9608; ERA9610 

Joint meeting of Energy Science Coordinating Committee, Newport News, VA 
(United States), 28-29 Sep 1995. Sponsored by Department of Energy, 
Washington, DC. 

Order this product from NTIS by: phone at 1 - 800 -553 -NTIS (U.S. 
customers); (703)605-6000 (other countries); fax at (703)321-8547; and 
email at orders©ntis . f edworld . gov . NTIS is located at 5285 Port Royal Road, 
Springfield, VA, 22161, USA. 

NTIS Prices: PC A03/MF AOl 

Public/ private key certification authority and key distribution. 
Draft 

Traditional encryption , which protects messages from prying eyes, has 
been used for many decades. The present concepts of encryption are built 
from that heritage. Utilization of modern software-based encryption 
techniques implies much more than simply converting files to an unreadable 
form. Ubiquitous use of computers and advances in encryption technology 
coupled with the use of wide-area networking completely changed the reasons 
for utilizing encryption technology. The technology demands a new and 
extensive infrastructure to support these functions. Full understanding... 

. . . paper addresses issues surrounding the establishment and operation of a 
key management system (i.e., certification authority ) that is essential 
to the successful implementation and wide-spread use of encryption . 

Descriptors: Computer Networks; Cryptography ; Data Transmission; 
Security; Meetings 
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14056149 PASCAL No.: 99-0246867 

A prototype implementation of a system to support multiple certification 



authorities 

Global IT security : Vienna, Budapest, 31 August - 2 September 1998 

CHANG H 

PAPP Gyoergy, ed; POSCH Reinhard, ed 

PIPSC, 530 Laurier Avenue West, Ottawa, KIR 7T1, Canada 

IFIP TCll conf erenceSEC '98 : international conference on information 
security, 14IFIP TCll conf erenceSEC '98 : international conference on 
information security, 14 (Budapest HUN) 1998-08-31 
1998 504-508 

Publisher: OCG, Vienna; IFIP, Vienna 

Language: English 

Copyright (c) 1999 INIST-CNRS. All rights reserved. 

A prototype implementation of a system to support multiple certification 
authorities 
1998 

. . . 509 specifies a property that both keys in the key pair can be used 
for encipherment , with the private key being used to decipher if 
the public key was used, and the public key being used to decipher if the 
private key was used. An extension to X.509 could be used for 

implementation of a multiple Certification Authorities (CAs) system. 
Our system can be used for implementation of multiple certificate policies. 
It can be used also for distribution of public keys for encryption as 
well as for public keys for verification of digital signature. To improve 
interoperability, certificates. . . 

English Descriptors: Cryptography ; Public key; Certification; 

Authentication; Signing; Service quality; Prototype; Implementation; 
Electronic data interchange 

French Descriptors: Cryptographic ; Cle publique; Certification; 

Authentif ication; Signature; Qualite service; Prototype; Implementation; 
Echange donnee informatise 
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1675632 H.W. WILSON RECORD NUMBER: BAST96064609 
Digital signatures 
AUGMENTED TITLE: VeriSign 
Garfinkel, Simson L; 

Technology Review v. 99 (Nov. /Dec. '96) p. 14-15 
DOCUMENT TYPE: Feature Article ISSN: 0040-1692 

ABSTRACT: New organizations called certificate authorities are using 
digital signatures to encrypt messages on the Internet so that they 
cannot be read by anyone other than the... 

...and not to a digital impostor, but, for an annual fee, Verisign, the. 
largest certificate authority , will confirm that a public key really 
belongs to a particular individual or company. Concern that encryption 
may be used to evade court-authorized wiretaps has prompted the U.S. 
government to adopt the Digital Signature Standard (DDS) . DDS allows the 
use of public and private keys for digital signature but not for 
encryption . 
1996 
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Title: Integration of magnetic bearings in the design of advanced gas 
turbine engines 

Author: Storace, A.F.; Seed, D. ; Lyons, J. P.; Preston, M.A. 
Corporate Source: General Electric Co, Cincinnati, OH, USA 
Source: Journal of Engineering for Gas Turbines and Power, Transactions 
of the ASME V 117 n 4 Oct 1995. p 655-665 
Publication Yean 1995 
CODEN: JETPEZ ISSN: 0742-4795 
Language: English 

...Abstract: gas turbine engine rotor support. These advantages include 
tremendously improved vibration and stability characteristics, reduced 
power loss, improved reliability, fault tolerance, and greatly extended 
bearing service life. The marriage of these... 

...performance and structural efficiency for future gas turbine engines. 
However, obtaining the maximum payoff requires two key ingredients. The 
first is the use of modern magnetic bearing technologies such as innovative 
digital control techniques, high-density power electronics, high-density 
magnetic actuators, fault- tolerant system architecture, and electronic 
(sensorless) position estimation. This paper describes these technologies 
and the test hardware currently in place for verifying the performance of 
advanced magnetic actuators, power electronics, and digital controls. The 
second key ingredient is to go beyond the simple replacement of rolling 
element bearings with magnetic bearings... 

Descriptors: Gas turbines; Magnetic bearings; Technology; Digital control 
systems; Power electronics; Actuators; Fault tolerant computer systems; 
Composite materials; Aircraft materials 
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THE DESIGN OF SUBSTITUTION- PERMUTATION NETWORK CIPHERS RESISTANT TO 
CRYPTANALYSIS 

Author: KEYS, HOWARD M. 
Degree: PH.D. 
Year: 1994 

Corporate Source/Institution: QUEEN'S UNIVERSITY AT KINGSTON (CANADA) ( 
0283) 

Source: VOLUME 56/04-B OF DISSERTATION ABSTRACTS INTERNATIONAL. 

PAGE 2212. 163 PAGES 
ISBN: 0-315-95626-7 

Year: 1994 

In this thesis, we examine a fundamental class of private key 
block ciphers, referred to as substitution-permutation networks (SPNs) . In 
particular, we study design principles... 

...that is applicable to all classes of SPNs. As well, we consider the 
application of two established, powerful attacks: differential 
cryptanalysis and linear cryptanalysis . We find that the appropriate 
selection of S-boxes... 

...the avalanche criterion and relate the key avalanche property to the 
application of a key clustering attack. The results of the analysis 
further confirm the general design principles suggested above. 
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01370716 ORDER NO: AAD94-22762 

CONNECTIVITY IN RANDOM NETWORKS AND TRAFFIC MODEtiING IN MOBILE NETWORKS 

Author: WENG, LIN 
Degree: D.SC. 
Year: 1994 

Corporate Source/Institution: THE GEORGE WASHINGTON UNIVERSITY (0075) 
Source: VOLUME 55/04-B OF DISSERTATION ABSTRACTS INTERNATIONAL. 
PAGE 1595. 168 PAGES 

Year: 1994 

...thesis we consider a novel approach to connectivity analysis in a 
packet radio network. A second key contribution is a powerful 
analytic tool for traffic modeling in mobile networks. 

The connectivity analysis includes an extension of Erdos single link 
random Euclidean networks to a general multiple hop network. The 
importance of this approach is its generalization to a future network 
concept which may have mobile base stations or the mobiles themselves 
become relay stations in the network. We characterize the minimum path 
length distribution (MPLD) between nodes, defined as... 
...we investigate some applications of MPLD. The MPLD is a fundamental 
problem that applies to many aspects of network analysis, such as the 
connectivity, power assignment, routing criteria, average time delay, 
etc . 

The traffic modeling of mobile networks combines several important 
features including non-uniform cross boundary traffic, and specific road 
map characteristics which influence the mobile dynamics. From this model 
and assumed distributions we derive several performance criteria 
including handoff probability, stay-in cell time distribution, blocking 
probability and a new. . . 

...can be examined analytically, again eliminating entire simulation runs. 

The simulations have been presented to verify the validity of the 
assumptions and approximations made in the analysis. 
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STUDIES OF THE TOTAL SYNTHESIS OF FREDERICAMYCIN A. DEVELOPMENT OF AN 
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ABCD(E) RING SYSTEM: PREPARATION OF ABCD, ABODE AND FULLY FUNCTIONAL I ZED 
ABODE STRUCTURAL ANALOGS (CHROMIUM CARBENE BENZANNULATION) 
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...highly unusual structure, isolated from Streptomyces griseus, 
exhibits very good in vitro cytotoxic activity and confirmed 
antibacterial and antifungal activity. In vivo, it exhibits significant 
antitumor activity. The syntheses of ABCD... 

. . .highly convergent approach to the synthesis of Fredericamycin A is based 
on implementation of the two key carbon-carbon bond forming steps with 
the rest being functional group interconversions and/or 

protection/deprotection. The first key carbon-carbon bond forming step 
is the regiospecif ic alkyne -chromium carbene benzannulation reaction that 
introduces . . . 
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...investigate the inter-service transportability of this technology. 

Method. The research design consisted of selecting two major 
shore-based Naval Aircraft Intermediate Departments (AIMDs) under the 
Commander, Naval Air Force, United... 

...MGEEM: the Other AIMD served as the control facility for the experiment. 
To answer the second question, Key Result Areas (KRAs) , indicators and 
the related changes in productivity were compared with an 
independently-conducted implementation in an Air Force facility with an 
identical organizational mission. 

Results. The findings of this study confirmed the viability of using 
the MGEEM in Naval industrial facilities, since productivity increased 43.7 

. . .measurement and enhancement model would be required to better fit the 
system to the specific organization . 
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...the anionic oxy-Cope rearrangement of dialkenylcyclobutanols for 
stereospecif ic formation of the cyclooctane ring. The first key 
intermediate targeted for synthesis was 
(l$\beta, 4\beta, 5\beta) $-5-ethenyl-l-methyl . . . 

...state afforded the 

l$\alpha$ - isopropyl - 3a$\beta { , } 7\beta$ -dimethylcyclopentacyclooctenone . 
Isomerization of the cyclooctenone double bond followed by hydrogenation 
produced the required trans - fused- $\beta$ - isopropylcyclooctanone . 
Cyclopentenone annulation of this... 

. . . dicyclopenta (a,d) cycloocten-2 -one synthesized with identical to the 
product produced from a two step degradation of an authentic sample of 
anadensin. An X-ray crystal structure of the 5-8-5 cyclopentenone 
identified the 3a stereochemistry and confirmed its molecular structure 
as an advanced intermediate towards the synthesis of anadensin. 
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Title: A new two -way and location-secure authentication scheme based on 
secret sharing 

...Abstract: The proposed scheme is based on the technique of secret 
sharing via the use of private keys . Handoff is a phenomenon very 
unique in mobile communications. Authentication is not only needed during 

... authentication to be done in both occasions. The scheme has the 
additional attractions of providing two -way authentication and location 
privacy. Two -way authentication allows a base station and a mobile unit 
to verify each other. Location privacy is a feature becoming increasingly 
attractive to many subscribers. 

...Identifiers: two -way authentication scheme... 

. . . private keys ; 
1999 
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...Abstract: environment without any external guidance. The crucial 
technique employed is a non-Cartesian way of organizing software agents 
for the creation of a highly responsive control program. The resulting 
software is considerably reduced in size. Through numerous experiments 
using mobile robots we confirmed that these new control programs excel in 
functionality, efficiency, flexibility and robustness. The second key 
technique in the planning stage is evolutionary computation, of which 
genetic algorithms are a principal... 
1994 
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All eyes on PKI Though still in its infancy, PKI is already being 

heralded for its strength and versatility. But can it withstand the weight 
of our. - . 

Bhimani , Anish 

Information Security , October 1, 1998 , vl nil p22-31, 5 Page(s) 
ISSN: 1096-8903 

... key infrastructure (PKI), which allows users to interact with other 
users and applications, obtain and verify identities and keys, and 
register with certificate authorities . Describes the components needed to 
take full advantage of PKI, including certificate authority (CA) , root 
CA, registration authority , certificate directory, management protocols, 
operational protocols, and personal security environment. Attention is 
given to such deployment issues as verification procedures, the scope of 
certification , certificate lifetimes, and the validation of certificates. 
Considers outsourcing with regard to deploying PKIs to... 

...to widespread PKI usage is the lack of interoperability and standards. 
Also discusses protecting the private key in electronic transactions. 
Includes two sidebars and three diagrams, (jo) 
1998 

Descriptors: Electronic Commerce; Security; Internet; Certificate 
Authorities 
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central heating furnaces - -was reviewed. Advanced in technology 
achieved since the mid-1980s were the primary focus. Key findings of 
the review included: (1) the new source performance standard (NSPS) 
certification procedure only qualitatively predicts the level of 

emissions from wood heaters under actual use in... 

... noncertified v;oodstoves) ; (4) new technology appliances and fuels can 
reduce emissions significantly; (5) the International Organizatin for 
Standardization and EPA NSPS test procedures are quite dissimilar, and data 
generated by the two procedures would not be comparable; and (6) the 
effect of wood moisrure and wood type... 
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... central heating furnaces- -was reviewed. Advanced in technology 
achieved since the mid-1980s were the primary focus. Key findings of 
the review included: (1) the new source performance standard (NSPS) 
certification procedure only qualitatively predicts the level of 
emissions from wood heaters under actual use in. . . 

. , . noncertif ied woodstoves) ; (4) new technology appliances and fuels can 
reduce emissions significantly; (5) the International Organizatin for 
Standardization and EPA NSPS test procedures are quite dissimilar, and data 
generated by the two procedures would not be comparable; and (6) the 
effect of wood moisture and wood type... 
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1-V multithreshold-voltage CMOS digital signal processor for mobile phone 
application 

MUTOH S I; SHIGEMATSU S; MATSUYA Y; FUKUDA H; KANEKO T; YAMADA J 
NTT System Electronics Lab, Kanagawa, Japan 

Proceedings of the 1996 International Solid-State Circuits Conference, 
ISSCC (San Francisco, CA, USA) 1996-02-08/1996-02-10 

Journal: IEEE Journal of Solid-State Circuits, 1996 , 31 (11) 1795-1802 
Language: English 

1996 

A 1-V power supply low- power and high-speed 16-b fixed-point digital 
signal processor using a 0.5- mu. . . 

. . .both high- threshold-voltage and low-threshold-voltage transistors is one 
key to attaining low power consumption with keeping processing throughput 
high. A maximum operating frequency of 13.2 MHz and an energy consumption 
of 2.2 mW/MHz were achieved at 1 V. The second key to low- power 
operation is a power management scheme that uses a secondary embedded 
microprocessor. This proposed scheme minimizes the standby power in the 
waiting state by effectively controlling the sleep mode in the MTCMOS 
design. We confirmed that the standby leakage current was reduced three 
orders of magnitude and that the energy... 

. . . that consumed by conventional CMOS circuits with lowered supply voltage 
and threshold voltage but without power management. 

English Descriptors: Digital signal processor; Mobile phone applications; 



Threshold voltage; Power management scheme; Power consumption; Theory 
; CMOS integrated circuits; Mobile telecommunication systems; Electric 
power supplies to apparatus; Microprocessor chips; Transistors; Leakage 
currents; Digital signal processing 

...French Descriptors: Circuit integre CMOS; Systeme radiocommunication 
mobile; Alimentation electrique appareil; Puce microprocesseur ; 
Transistor; Courant fuite; Traitement niomerique signal 
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Abstract: Public key management has received considerable attention 
from both the research and commercial comm.unities as a useful primitive for 
secure electronic commerce and secure communication. While the mechanics of 
certifying and revoking public keys and escrowing and recovering private 
keys have been widely explored, less attention has been paid to access 
control frameworks for regulating... 

. . . framework for a key management service that supports public key 
registration, lookup, and revocation, and private key escrow, protected 
use (e.g., to decrypt selected messages), and recovery. We propose an 
access control model using a policy based on principal, ownership, and 
authority relationships on keys. The model allows owners to grant to 
others (and revoke) privileges to... 

...Descriptors: public key cryptography ; 
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Abstract: We introduce two methods that allow you to certify the time 
when a particular document was presented to a certifying authority . 
While some of the algorithms that served this purpose already existed in 
the literature, our methodology has significant practical advantages. The 
two methods we show are more straightforward, by giving a user a chance, 
in some cases, to operate on one value rather than two . They give the 
user the flexibility to select the most appropriate algorithm. They provide 
for a reasonable sharing of the workload between the user and the 
timestamping authority . 

Descriptors: cryptography ; 
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private key cryptography 
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. . . This paper will concentrate on an interesting area of software 
security based on public key cryptographic technology. The Public Key 
system makes it possible for two parties to communicate securely without 
either having to know or trust the other party. This is possible because a 
third party that both the other parties trust identifies them and 
certifies that their keys are genuine. This third party is called the 
Certification Authority , or CA. CA guarantees that they are who they 

claim to be. The CA does this by registering each user's identification 
information and issuing them with a set of Private keys and a set of 
Public Key Certificates. A worldwide Public Key Infrastructure (PKI) that 
supports . . . 

...and state policies/regulations will not be available in the near future. 
In the meantime organizations and corporations can utilize this security 
technology to satisfy current business needs. Many organizations are 
choosing to manage their own Certificate Authority (CA) instead of 
outsourcing this function to a third party (i.e. Verisign, Thawte, GTE... 

Descriptors: Meetings; * Cryptography ; *Computer access control; 
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Co-operatively formed group signatures 

Topics in cryptology - CT-RSA 2002 : San Jose CA, 18-22 February 2002 
Group signatures and their applications have received considerable 
attention in the literature in recent times. Substantial gains have been 
made with respect to designing provably secure and efficient schemes. In 
practice, as with all signature schemes, deploying group signature 
schemes requires the group member's signing keys to be both physically 
and electronically secure from theft. Smartcards or... 

. . . offered as a solution to this problem. We consider the possibility of 
co-operatively forming group signatures so as to balance the processing 
load between a modestly performed secure device and a much more powerful 
workstation. The constructions are based on the observation that several 
recent group signature schemes have adopted a structure which utilises 
two values in signature creation - a private signing key and a group 
membership certificate. We describe a co-operative group signature 
scheme based on a recently proposed scheme as well as a 'wallet with 
observer . . . 
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... resources, and expertise to safeguard a host are only some of the 
reasons that so many systems are insecure any type of network commercial 
or tactical. To compound the problem, like... 

... on (simply due to usage) , but with the rapidly changing security field, 
it also requires considerable effort to stay abreast of the latest 
information. Army Research Labs (ARL) is trying to... 

... ARL will determine what works and how they work in the tactical area. 
There are numerous ways to protect the wire/wireless network via public 
domain or commercial software. Some of... 

. . . bandwidth, complexity, implementation and deployment of monitoring and 
auditing tools. The implementation and deployment of encryption , public 
and private key information, and certificate authority . Also, ARL 

will address configuration problems, correcting or catching misuse and 
misunderstandings, and computers that... 
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information; Private key ; Certification ; Signal processing; 
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...through a digital audit trail. Public key infrastructure (PKI) , which is 
based on public key cryptography , also secures transactions over the 
Internet by using public and private components. Messages transported are 
encrypted with a public key and are then read by the receiver with a 
private key . Other superior security methods for extranets described are 
trusted parties ( certification authorities ) and registration 
authorities . 
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...included. The ManagelT data management suite will meld PLATINUN 
Enterprise DBA and DBVision with the CA -Datacom management tool. The new 
eTrust product line will include single sign-on, security, encryption , 
firewall software, public - key infrastructure technology, and other 
e -commerce tools. At CA World, CA handed out thousands of developer's 
kits for Jasmine TND, which is an upgrade to... 
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. . .bring a higher level of flexibility. A PKI has several components which 
work together to encrypt data and create digital certificates. On the 
back end, a database manages digital certificates and public and private 
keys . The certificate authority ( CA ) signs each digital certificate 
before sending it to the requesting client. After a certificate is created, 
it is stored in an X.500 directory. The CA creates two pairs of public 
and private keys for each user or server; one pair is used for 
encrypting and decrypting information, and the other is used by client 
applications to create a digital signature on. . . 
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. . .With private key encryption, only the sender and receiver know the key. 
With public key encryption , senders and receivers hold a common key and 
some get an additional private key . When encryption is required for 
multiple users, a Certificate Authority ( CA ) is required. One of the most 
popular encryption schemes is the Data Encryption Standard (DES) . DES 
allows the receiver and sender to use... 



10/3, K/5 

DIALOG (R) File 256 : Sof tBase : Reviews , Companies&Prods . 
(c)2002 Info. Sources Inc. All rts. reserv. 

00100882 DOCUMENT TYPE: Review 

PRODUCT NAMES: e-Lock (657859); Netscape Certificate Server 1.0 (650455) 
; SENTRY CA (657841); Microsoft Internet Explorer (577375) 

TITLE: CAs (Certificate Authorities) : How Valuable Are They? 

AUTHOR: Shipley, Greg 

SOURCE: Network Computing, v8 n6 p54 (10) Apr 1, 1997 
ISSN: 1046-4468 

HOMEPAGE : http : //www. Net workCompu ting . com 

RECORD TYPE: Review 

REVIEW TYPE: Product Analysis 

GRADE: Product Analysis, No Rating 



REVISION DATE: 



20000228 



...windows-based client that supports secure multipurpose mail extension 
(S/MIME) t a protocol that uses public key encryption over e-mail, 
improving security. Microsoft's Microsoft Internet Explorer 3.01 also 
includes a CA program feature that is not yet up and running. Smarty from 
Fisher International is a... 
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company uses its Elliptic Curve Cryptography (ECC) for its encryption 
technology. Partners and customers include Symbian, H&R Block, Sun. . . 
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MobileTrust (TM) Server Certificates from Certicom are the basis for 
ensuring trust on the Internet, where communications pass blindly from 
computer . . . 

...identity of the computer they are communicating with. These are accepted 
by applications built with Certicom SSL Plus and WTLS Plus toolkits; they 
also interoperate with most RSA server applications. Certificates... 

...only Certificate Authority (CA) to offer standards -based server 
certificates that employ both RSA and elliptic curve cryptography (ECC) 
algorithms, which secure communications in both wireline and wireless 



environments. Its data centers. 



11/3, K/3 

DIALOG (R) File 256 :Sof tBase :Reviews, Companies&Prods . 
(c)2002 Info. Sources Inc. All rts. reserv. 

01084255 DOCUMENT TYPE: Product 

PRODUCT NAME: WTLS Plus 1.1 (084255) 

Certicom Corp (661333 
25821 Industrial Blvd #300 
Hayward, CA 94545 United States 
TELEPHONE: (510) 780-5400 

RECORD TYPE: Directory 

CONTACT: Sales Department 

REVISION DATE: 020521 

Certicom Corp . . . 

WTLS Plus (TM) from Certicom is a WTLS toolkit that offers full strength 
WTLS security. WTLS is a WAP Forum standard that is ideally suited for WAP 
implementations. It taps ECC ( elliptic curve cryptography) technology, 
which can support client authentication on any embedded device. This 
wireless security solution. . . 



11/3, K/4 

DIALOG (R) File 2 56 : Sof tBase : Reviews , Companies &:Prods . 
(c)2002 Info. Sources Inc. All rts. reserv. 

01084247 DOCUMENT TYPE: Product 

PRODUCT NAME: SSL Plus (0 84247) 

Certicom Corp (661333 
25821 Industrial Blvd #300 
Hayward, CA 94545 United States 
TELEPHONE: (510) 780-5400 

RECORD TYPE: Directory 

CONTACT: Sales Department 

REVISION DATE: 020625 

Certicom Corp . . . 

SSL Plus (TM) from Certicom is the industry's most widely deployed 
commercial Secure Sockets Layer (SSL) product. It offers ease of use, rapid 
development, and support for RSA, DSA/Dif f ie-Helman, and elliptic curve 
cryptography (ECC) --the only SSL product with that capability. The toolkit 
supports a wide range... 
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Certicom 's Security Builder is a cryptographic toolkit that allows 
developers to add signatures, key management, and encryption to 
applications. Security Builder uses elliptic curve cryptography (ECC) 
technology to create solid, scalable security features for a wide range of 
computing . . . 
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movianVPN 2.1 from Certicom is an award-winning software VPN client that 
supports the leading VPN security standard IPSec... 

...supports popular devices that run Palm OS or Windows CE . Other features 
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The Federal Aviation Administration (FAA) chose Certicom 's Trustpoint 
Certificate Authority public key infrastructure (PKI) to secure air- 
to-ground data communications... 

...s digital certificate- and encryption technology offer the foundations 
PKI and are based on elliptic curve cryptography (ECC) . ECC creates 
encryption keys that require a great deal less bandwidth than other... 
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Bluetooth SIG's Bluetooth, Wireless Application Protocol (WAP), Palm's 
Palm. Net, Certicom 's Elliptic Curve Cryptography, and Research in 
Motion's Blackberry are highlighted in a discussion of wireless 
technologies . . . 
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...SSH Certifier PKI Product Family targets service providers and companies 
looking for scalable, X.509 public key infrastructure (PKI) systems. 
SSH Certifier PKI Product Family encompasses the SSH Certifier (TM) , which 
offers . . . 

, . . PKI technology across growing networks. The application offers online 
certificate enrollment, publication of certificates to multiple 
directories, unlimited Certification Authorities (CAs) , and other 
features. The SSH Token Master provides a streamlined interface that allows 
nontechnical . . . 
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...security standards rely substantially on the identity of IBM, Entrust, 
and RSA. CA has a public key infrastructure (PKI) and access management 
products, but IBM, Entrust, and RSA Security have very large markets and 
considerable experience. CA has decided to position its products in five 
brand units, and each will have its... 
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...be managed separately. One way to take control over the security 
environment is through a public key infrastructure (PKI) . The PKI 
accommodates data encryption and digital signatures through a 
certificate-based framework. . . 

...create digital certificates. On the back end, a database manages digital 
certificates and public and private keys . The certificate authority 
(CA) signs each digital certificate before sending it to the requesting 
client. After a certificate is created, it is stored in an X.500 directory. 
The CA creates two pairs of public and private keys for each user 
or server; one pair is used for encrypting and decrypting information, and 
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...Abstract: encryption, message digesting, and digital signatures. 
Authentication and digital signatures are performed using public key 
cryptography . Public keys are certified by Inferno-based certifying 
authorities that sign the public keys with their own private key. 
(Author abstract) 7 Refs. 
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. . . -\bs^:ract : limited but attainable goals of secure E-Mail and secure 
remote, access, supported by a Certification Authority and public key 

cryptographic functions, is intended to demonstrate that these functions 
can be provided in a relatively short... 
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. . .extended to work in this environment are the security watchdog, the 
access control list, and public key cryptography with its 
certification authority . Also developed are the concepts of a tamper 
proof device, a device validation authority, and... 
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...Abstract: private keys is a crucial issue in systems which require 
high-level security, such as certification authorities based on the RSA 
public key cryptosystem . NEC has developed tamper resistant private 

key management equipment, CK-Guard. CK-Guard is accessed... 
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...Abstract: can verify signatures, is described. The authors refer to 
the asymmetrical RSA security process, including encryption and signature 
validation. Public key OA is discussed and the SmartOS operating 

system for chip cards is described. 
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...Abstract: costs something; (iii) standards are necessary; and (iv) 
public keys are hard to manage. When public - key cryptography 
employing a certification authority is used to sign a legal document, 
the parties to the transaction are seeking to... 
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...Abstract: parties may act as TTPs for specific functions, the most 
obvious example here being the certification authority for public 

encryption keys . This function is defined under the CCITT 

recommendations for directory services X.509. This TTP. . . 
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...Abstract: signature mechanism and a trusted third party ere needed. 
Such signatures can be affected using public key data encryption . The 
trusted third party, a certification authority , distributes individual 
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... passwords and firewalls. Explains that PKI uses a system of digital 
certificates and certificate authorities ( CA ) to authenticate users. Adds 
that PKI uses public and private key encryption to protect data 
integrity. Indicates that mainstream deployment of PKI has been hampered by 
factors . . . 
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source of difficulty in the operation of global public key 
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infrastructures, since they are the basis for the evaluation of trust in 
binding between a key and a subject in a public key certificate. The 
absence of common ways of formally specifying details of policies is a 
source of difficulty in the operation of global public key 
infrastructures. In this paper, the problem of the f ormalisation of 
certificate policies is discussed and... 

... formal presentation is proposed. Results from the formatting and 
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A prototype implementation of a system to support multiple 
certification authorities 
1998 

... property that both keys in the key pair can be used for encipherment , 
with the private key being used to decipher if the public key was 
used, and the public key being used to decipher if the private key 
was used. An extension to X.509 could be used for implementation of a 
multiple Certification Authorities (CAs) system. Our system can be 

used for implementation of multiple certificate policies. It can be used 
also for distribution of public keys for encryption as well as for 
public keys for verification of digital signature. To improve 

interoperability, certificates of two or more versions may. . . 
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Certificate policies play a central role in public key 
infrastructures since they are the basis for evaluation of trust in binding 
between a key and a subject in a public key certificate. The absence of 
common ways to formally specify details of policies is a source of 
difficulties in the operation of global public key infrastructures. In 
this paper, a problem of f ormalisation of certificate policies is discussed 
and a . . . 

. . . their formal presentation is proposed. A result of formatting and 
comparison of certificate policies from several certification 
authorities is also given. 
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... les informations, d'empecher les modifications, d'encoder les 
messsages et de certifier les signatures numeriques ( certification 

authority ) . II existe aujourd'hui quelques infrastructures : PGP (Pretty 
Good Priwacy) , X.509, etc. Seul 1... 
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